RE: H e l p .... [7:73412]
: RE: H e l p [7:73412] Dom wrote: From our website - Whilst not wishing to get involved in the 'holy war' of which text editor is the best, Dom happens to like UltraEdit- 32 available at http://www.ultraedit.com. This is a comprehensive Text Editor, HEX Editor, HTML Editor and Programmers Editor. Syntax highlighting is available for hundreds of languages ranging from Ada to XML. There is even a syntax file for Cisco IOS command. What can that syntax file do? Thanks, Zsombor **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=73463t=73412 -- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Re: H e l p .... [7:73412]
Hi, It will open but I cannot read any thing out of it using Notepad... the out put looks something different from what I see in the router. I hear from a friend it must be opened via Unix editor for windows. And I am looking for that kind of editor. Cheers, Shab. Zsombor Papp wrote in message news:[EMAIL PROTECTED] I often use Notepad for this. What exactly happens when you say you can't open it? Or are you asking how to get the config out of the router? Check out the 'copy' commands on the router. Cut-n-paste also works great (in both directions), if your config is not too long. Thanks, Zsombor Shab Hanon wrote: Hello every body, I want to make some changes in the config file using Notepad... but unfortunately I can not open the config file as I see it in the router... Can any one help me and tell me about a software to open and make some changes in the config file so I can upload it back into the router. Best regards, Shab. **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=73436t=73412 -- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
RE: H e l p .... [7:73412]
Go to www.vim.org and download gvim. Probably the best text editor out there. You are likely running into the CR/LF LF issues, which gvim handles nicely. Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050 NOTICE; This email contains confidential or proprietary information which may be legally privileged. It is intended only for the named recipient(s). If an addressing or transmission error has misdirected the email, please notify the author by replying to this message. If you are not the named recipient, you are not authorized to use, disclose, distribute, copy, print or rely on this email, and should immediately delete it from your computer. -Original Message- From: Shab Hanon [mailto:[EMAIL PROTECTED] Sent: Sunday, August 03, 2003 6:12 AM To: [EMAIL PROTECTED] Subject: Re: H e l p [7:73412] Hi, It will open but I cannot read any thing out of it using Notepad... the out put looks something different from what I see in the router. I hear from a friend it must be opened via Unix editor for windows. And I am looking for that kind of editor. Cheers, Shab. Zsombor Papp wrote in message news:[EMAIL PROTECTED] I often use Notepad for this. What exactly happens when you say you can't open it? Or are you asking how to get the config out of the router? Check out the 'copy' commands on the router. Cut-n-paste also works great (in both directions), if your config is not too long. Thanks, Zsombor Shab Hanon wrote: Hello every body, I want to make some changes in the config file using Notepad... but unfortunately I can not open the config file as I see it in the router... Can any one help me and tell me about a software to open and make some changes in the config file so I can upload it back into the router. Best regards, Shab. **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=73440t=73412 -- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
RE: H e l p .... [7:73412]
Or try Wordpad. Thanks, Zsombor Reimer, Fred wrote: Go to www.vim.org and download gvim. Probably the best text editor out there. You are likely running into the CR/LF LF issues, which gvim handles nicely. Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050 NOTICE; This email contains confidential or proprietary information which may be legally privileged. It is intended only for the named recipient(s). If an addressing or transmission error has misdirected the email, please notify the author by replying to this message. If you are not the named recipient, you are not authorized to use, disclose, distribute, copy, print or rely on this email, and should immediately delete it from your computer. -Original Message- From: Shab Hanon [mailto:[EMAIL PROTECTED] Sent: Sunday, August 03, 2003 6:12 AM To: [EMAIL PROTECTED] Subject: Re: H e l p [7:73412] Hi, It will open but I cannot read any thing out of it using Notepad... the out put looks something different from what I see in the router. I hear from a friend it must be opened via Unix editor for windows. And I am looking for that kind of editor. Cheers, Shab. Zsombor Papp wrote in message news:[EMAIL PROTECTED] I often use Notepad for this. What exactly happens when you say you can't open it? Or are you asking how to get the config out of the router? Check out the 'copy' commands on the router. Cut-n-paste also works great (in both directions), if your config is not too long. Thanks, Zsombor Shab Hanon wrote: Hello every body, I want to make some changes in the config file using Notepad... but unfortunately I can not open the config file as I see it in the router... Can any one help me and tell me about a software to open and make some changes in the config file so I can upload it back into the router. Best regards, Shab. **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=73444t=73412 -- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
RE: H e l p .... [7:73412]
Hi, try Wordpad. It can also open files created by copying the configuration via tftp. Jens Neelsen --- Zsombor Papp wrote: I often use Notepad for this. What exactly happens when you say you can't open it? Or are you asking how to get the config out of the router? Check out the 'copy' commands on the router. Cut-n-paste also works great (in both directions), if your config is not too long. Thanks, Zsombor Shab Hanon wrote: Hello every body, I want to make some changes in the config file using Notepad... but unfortunately I can not open the config file as I see it in the router... Can any one help me and tell me about a software to open and make some changes in the config file so I can upload it back into the router. Best regards, Shab. **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=73448t=73412 -- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
RE: H e l p .... [7:73412]
From our website - Whilst not wishing to get involved in the 'holy war' of which text editor is the best, Dom happens to like UltraEdit- 32 available at http://www.ultraedit.com. This is a comprehensive Text Editor, HEX Editor, HTML Editor and Programmers Editor. Syntax highlighting is available for hundreds of languages ranging from Ada to XML. There is even a syntax file for Cisco IOS command. Very useful for spotting typos. A time limited, fully functional download is available on the web site. Best regards, Dom Stocqueler SysDom Technologies Visit our website - www.sysdom.org -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: 03 August 2003 17:19 To: [EMAIL PROTECTED] Subject: RE: H e l p [7:73412] Or try Wordpad. Thanks, Zsombor Reimer, Fred wrote: Go to www.vim.org and download gvim. Probably the best text editor out there. You are likely running into the CR/LF LF issues, which gvim handles nicely. Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050 NOTICE; This email contains confidential or proprietary information which may be legally privileged. It is intended only for the named recipient(s). If an addressing or transmission error has misdirected the email, please notify the author by replying to this message. If you are not the named recipient, you are not authorized to use, disclose, distribute, copy, print or rely on this email, and should immediately delete it from your computer. -Original Message- From: Shab Hanon [mailto:[EMAIL PROTECTED] Sent: Sunday, August 03, 2003 6:12 AM To: [EMAIL PROTECTED] Subject: Re: H e l p [7:73412] Hi, It will open but I cannot read any thing out of it using Notepad... the out put looks something different from what I see in the router. I hear from a friend it must be opened via Unix editor for windows. And I am looking for that kind of editor. Cheers, Shab. Zsombor Papp wrote in message news:[EMAIL PROTECTED] I often use Notepad for this. What exactly happens when you say you can't open it? Or are you asking how to get the config out of the router? Check out the 'copy' commands on the router. Cut-n-paste also works great (in both directions), if your config is not too long. Thanks, Zsombor Shab Hanon wrote: Hello every body, I want to make some changes in the config file using Notepad... but unfortunately I can not open the config file as I see it in the router... Can any one help me and tell me about a software to open and make some changes in the config file so I can upload it back into the router. Best regards, Shab. **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=73447t=73412 -- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Re: H e l p .... [7:73412]
Thanks Fred... it is good link :-) Cheers, Shab. Reimer, Fred wrote in message news:[EMAIL PROTECTED] Go to www.vim.org and download gvim. Probably the best text editor out there. You are likely running into the CR/LF LF issues, which gvim handles nicely. Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050 NOTICE; This email contains confidential or proprietary information which may be legally privileged. It is intended only for the named recipient(s). If an addressing or transmission error has misdirected the email, please notify the author by replying to this message. If you are not the named recipient, you are not authorized to use, disclose, distribute, copy, print or rely on this email, and should immediately delete it from your computer. -Original Message- From: Shab Hanon [mailto:[EMAIL PROTECTED] Sent: Sunday, August 03, 2003 6:12 AM To: [EMAIL PROTECTED] Subject: Re: H e l p [7:73412] Hi, It will open but I cannot read any thing out of it using Notepad... the out put looks something different from what I see in the router. I hear from a friend it must be opened via Unix editor for windows. And I am looking for that kind of editor. Cheers, Shab. Zsombor Papp wrote in message news:[EMAIL PROTECTED] I often use Notepad for this. What exactly happens when you say you can't open it? Or are you asking how to get the config out of the router? Check out the 'copy' commands on the router. Cut-n-paste also works great (in both directions), if your config is not too long. Thanks, Zsombor Shab Hanon wrote: Hello every body, I want to make some changes in the config file using Notepad... but unfortunately I can not open the config file as I see it in the router... Can any one help me and tell me about a software to open and make some changes in the config file so I can upload it back into the router. Best regards, Shab. **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=73454t=73412 -- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
RE: H e l p .... [7:73412]
Dom wrote: From our website - Whilst not wishing to get involved in the 'holy war' of which text editor is the best, Dom happens to like UltraEdit- 32 available at http://www.ultraedit.com. This is a comprehensive Text Editor, HEX Editor, HTML Editor and Programmers Editor. Syntax highlighting is available for hundreds of languages ranging from Ada to XML. There is even a syntax file for Cisco IOS command. What can that syntax file do? Thanks, Zsombor Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=73456t=73412 -- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
H e l p .... [7:73412]
Hello every body, I want to make some changes in the config file using Notepad... but unfortunately I can not open the config file as I see it in the router... Can any one help me and tell me about a software to open and make some changes in the config file so I can upload it back into the router. Best regards, Shab. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=73412t=73412 -- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
RE: H e l p .... [7:73412]
I often use Notepad for this. What exactly happens when you say you can't open it? Or are you asking how to get the config out of the router? Check out the 'copy' commands on the router. Cut-n-paste also works great (in both directions), if your config is not too long. Thanks, Zsombor Shab Hanon wrote: Hello every body, I want to make some changes in the config file using Notepad... but unfortunately I can not open the config file as I see it in the router... Can any one help me and tell me about a software to open and make some changes in the config file so I can upload it back into the router. Best regards, Shab. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=73414t=73412 -- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
RE: H e l p .... [7:73412]
If you are using HyperTerm (comes with Windows) as many people do, you can use the Capture command. Click Tools - Capture. Make a note of where it will save the file. Do a show config or such on the router, then click Tools - Capture - Stop Capture. This will save a file called CAPTURE.TXT. This can be opened with notepad. Have fun! Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=73421t=73412 -- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
RE: Network Design - What Priscilla did NOT cover in h [7:65018]
Sorry Dan somebody beat you to the carrier pigeon message system. RFC 1149 is A Standard for the Transmission of IP Datagrams on Avian Carriers http://www.ietf.org/rfc/rfc1149.txt http://news.com.com/2100-1001-257064.html Unfortunately the FBI intends to shut them now with their new Carnivore anti-avian program. http://humorix.org/articles/may01/carnivore.shtml John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Monday, March 10, 2003 11:29 AM To: [EMAIL PROTECTED] Subject: RE: Network Design - What Priscilla did NOT cover in h [7:64842] Should have proposed a carrier pidgeon based message system for the wan and soup cans connected with string for the in house phones. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=65018t=65018 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Network Design - What Priscilla did NOT cover in h [7:64842]
Should have proposed a carrier pidgeon based message system for the wan and soup cans connected with string for the in house phones. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=64911t=64842 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: What is different between SIP, MGCP and H.323? [7:64877]
That's a huge subject and one that would require a very long and detailed explaination. In short however the basics are as follows: h.323 has been around awhile and is the basic standard out there. Cisco only made IP phones that supported h.323 for the longest time. They now are into SIP support as well. SIP came along and basically replaces h.323 and is more feature rich and really IMHO the future in comparison to h.323. More and more vendors are working to support SIP in their products, IP phones, firewalls, etc. As for MGCP that's the media gateway control protocol (or something like that) and deals with the communications between media gateways - more ISP related than the typical enterprise. There are tons of documents, rfc's, writeups and so forth on this subject for further research. Good luck, Ian http://www.ccie4u.com Rack rentals and lab scenarios On 10 Mar 2003 at 3:58, Andy Tse wrote: Hi, My boss asks my to setup an VoIP for our own office. While chosing products, I find there have several different protocols in the market. Can anyone explain the different between them? And the difficulty on maintenance, operation and administration of those Products? Thank you very much! Hosui Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=64990t=64877 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
What is different between SIP, MGCP and H.323? [7:64877]
Hi, My boss asks my to setup an VoIP for our own office. While chosing products, I find there have several different protocols in the market. Can anyone explain the different between them? And the difficulty on maintenance, operation and administration of those Products? Thank you very much! Hosui Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=64877t=64877 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
H.323 and gatekeer [7:63069]
Can someone please help me to understand the following terms. H323 and Gatekeeper. I have a polycom video conferencing equipment and I'm trying to set up a IP to IP video connection between two cities. The conection works, but the quality is very bad a lot of jitter and delay. I was told by the manufacturer that I need to set a Gatekeeper to improve quality, where do I get the gatekeeper? Is a server or additional device. Can you please advise? Thanks JB Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=63069t=63069 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: what the h... - strange problem - MORE INFO [7:62184]
I bet the scans of ports 137 (NetBIOS Name) and 139 (NetBIOS session) happen all the time and aren't related. Most Internet-connected hosts are being scanned for these ports being open on a regular basis. File sharing uses them and if someone has file sharing open a hacker can do mischeif. Good luck with the troubleshooting. This is a good one. I'm still betting on some IDS or firewall or proxy server. Have you considered personal firewall/anti-virus software on the affected stations as a possibility too? Priscilla Charles Riley wrote: Thanks to all who have responded and requested more information. Below is a more embellished picture: Internet-BIG_ROUTER-FR-2500HUB---AS5300---D/U Users We are the ISP, in this case, which is why I can say no content filtering is occuring. We have several of these small POPs in the region, all of the going to BIG_ROUTER at a central location. BIG_ROUTER and its trusty configuration are not suspects at this point because the other POPs connected to it have no problem. In fact, if users dial into the POPs of nearby towns, they do not have this problem. This problem was brought to my attention about a week before the slammer attacks occured. The downloads are via HTTP and FTP; the results are the same. The problems occur with any server on the Internet. This morning, an user just informed that he can no longer download .img files. He also told that he logs attack traffic, and is seeing alot of scans and attempts against ports 137 (and sometimes 139) on his box. I don't think our FR provider is the problem since FR stops at Layer 2 and won't/can't distinguish between .zip and .gz files. I am thinking that perhaps there is a workstation or server connected to the hub that may be proxying or intercepting .zip and .exe requests? Sam's suggestion of sniffing is a good one, and will be probably be my next step as it's been a while since this POP LAN had its health checked. Troubleshooting continues! Charles Priscilla Oppenheimer wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Consider your OSI layers. :-) A hub problem is very unlikely to cause such an issue. A generic router wouldn't either. This definitely seems like a Layer 7 problem. Someone is filtering on .exe and .zip. They just weren't smart enough to think about the UNIX and Mac equivalents. This could be an Intrustion Detection System or some sort of smart firewall. How are they downloading these? E-mail attachments maybe? Not letting users download .exe files via e-mail attachments might make a lot of sense as an e-mail server configuration. Anyway, start looking at Layer 7 and above (politics, policies). Question your Internet provider! Priscilla Charles Riley wrote: Sorry, should have mentioned. I get the same result whether the user system is UNIX, Mac, or Windows...it plays havoc with .exe and .zip. That is a good suggestion, though, about the sniffer...that is about the only thing I haven't tried yet. The Kmart bluelight special hub is making me a little suspicious... Thanks, Charles Sam Sneed wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... load a packet sniffer on the laptop and see what really happens. If you don't have one I know of a good free one . You install libpcap first, reboot and then install analyzer. http://winpcap.polito.it/install/default.htm http://analyzer.polito.it/install/default.htm Then you can see if the packets are coming back to you and if windows is dropping them for some reason. Charles Riley wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... I ran across a strange problem with one of our POPs the other day, and am in the process of researching/troubleshooting it. We have a configuration something like this: Internet---2500---AS5300---D/U Users Not shown is a LAN connected to the 2nd Ethernet on the 2500. All connections to the shared Ethernet are via a Kmart bluelight special hub. The connection to the Internet is a T-1 FR. Neither the 2500 nor the T-1 is anywhere close to being overloaded. We are not doing any content filtering, nor have any access lists been applied, nor are any sites blocked. The connection works great...email, web browsing, etc. all work just fine. The only problem is that users can only download UNIX and Mac flavored files, but not anything that smacks of Windows. For example, they can down the .gz/tar and .sft files for a SSH client for example, but can not download its .exe or .zip counterpart for Windows! Take the same .exe and .zip file, and rename it with a UNIX or Mac filename
Re: what the h... - strange problem - Cisco doesn't like [7:62180]
Yes. As long as Charles knows he's not doing any filtering within his architecture, the filtering must be done at his ISP. But like I said earlier, the only way to be sure is running debug on the router and tcpdump on the host while downloading to see where the packets are dropped. Mossburg, Geoff (MAN-Corporate) wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... When you say, sounds like someone's content filtering upstream, are you talking about the frame provider? Geoff Mossburg -Original Message- From: Sam Sneed [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 29, 2003 5:50 PM To: [EMAIL PROTECTED] Subject: Re: what the h... - strange problem - Cisco doesn't like [7:62149] That HUB doesn't know the difference between the various file name extensions and neither does the router. UNIX comes with tcpdump so there's no need to load the sniffer. Also run the debug command on the router to see if the packets are going through it if you don't see them getting to the UNIX box in tcpdump outputs. sounds like someone's content filtering upstream. Most admins will block .zip and exe but aren't concerned with the UNIX .tar and .gz variants. You'll know this for sure when you run the debug command on the router, Charles Riley wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Sorry, should have mentioned. I get the same result whether the user system is UNIX, Mac, or Windows...it plays havoc with .exe and .zip. That is a good suggestion, though, about the sniffer...that is about the only thing I haven't tried yet. The Kmart bluelight special hub is making me a little suspicious... Thanks, Charles Sam Sneed wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... load a packet sniffer on the laptop and see what really happens. If you don't have one I know of a good free one . You install libpcap first, reboot and then install analyzer. http://winpcap.polito.it/install/default.htm http://analyzer.polito.it/install/default.htm Then you can see if the packets are coming back to you and if windows is dropping them for some reason. Charles Riley wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... I ran across a strange problem with one of our POPs the other day, and am in the process of researching/troubleshooting it. We have a configuration something like this: Internet---2500---AS5300---D/U Users Not shown is a LAN connected to the 2nd Ethernet on the 2500. All connections to the shared Ethernet are via a Kmart bluelight special hub. The connection to the Internet is a T-1 FR. Neither the 2500 nor the T-1 is anywhere close to being overloaded. We are not doing any content filtering, nor have any access lists been applied, nor are any sites blocked. The connection works great...email, web browsing, etc. all work just fine. The only problem is that users can only download UNIX and Mac flavored files, but not anything that smacks of Windows. For example, they can down the .gz/tar and .sft files for a SSH client for example, but can not download its .exe or .zip counterpart for Windows! Take the same .exe and .zip file, and rename it with a UNIX or Mac filename extension, and you can download it. Surprisingly enough, the problem does not lie with the users. I took a clean laptop to the site, and encountered the same results. Has anyone ever experienced a problem like this? Could this be a bug in the IOS on the 2500? Any suggestions would be welcome. TIA, Charles Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=62180t=62180 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: what the h... - strange problem - MORE INFO [7:62184]
Thanks to all who have responded and requested more information. Below is a more embellished picture: Internet-BIG_ROUTER-FR-2500HUB---AS5300---D/U Users We are the ISP, in this case, which is why I can say no content filtering is occuring. We have several of these small POPs in the region, all of the going to BIG_ROUTER at a central location. BIG_ROUTER and its trusty configuration are not suspects at this point because the other POPs connected to it have no problem. In fact, if users dial into the POPs of nearby towns, they do not have this problem. This problem was brought to my attention about a week before the slammer attacks occured. The downloads are via HTTP and FTP; the results are the same. The problems occur with any server on the Internet. This morning, an user just informed that he can no longer download .img files. He also told that he logs attack traffic, and is seeing alot of scans and attempts against ports 137 (and sometimes 139) on his box. I don't think our FR provider is the problem since FR stops at Layer 2 and won't/can't distinguish between .zip and .gz files. I am thinking that perhaps there is a workstation or server connected to the hub that may be proxying or intercepting .zip and .exe requests? Sam's suggestion of sniffing is a good one, and will be probably be my next step as it's been a while since this POP LAN had its health checked. Troubleshooting continues! Charles Priscilla Oppenheimer wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Consider your OSI layers. :-) A hub problem is very unlikely to cause such an issue. A generic router wouldn't either. This definitely seems like a Layer 7 problem. Someone is filtering on .exe and .zip. They just weren't smart enough to think about the UNIX and Mac equivalents. This could be an Intrustion Detection System or some sort of smart firewall. How are they downloading these? E-mail attachments maybe? Not letting users download .exe files via e-mail attachments might make a lot of sense as an e-mail server configuration. Anyway, start looking at Layer 7 and above (politics, policies). Question your Internet provider! Priscilla Charles Riley wrote: Sorry, should have mentioned. I get the same result whether the user system is UNIX, Mac, or Windows...it plays havoc with .exe and .zip. That is a good suggestion, though, about the sniffer...that is about the only thing I haven't tried yet. The Kmart bluelight special hub is making me a little suspicious... Thanks, Charles Sam Sneed wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... load a packet sniffer on the laptop and see what really happens. If you don't have one I know of a good free one . You install libpcap first, reboot and then install analyzer. http://winpcap.polito.it/install/default.htm http://analyzer.polito.it/install/default.htm Then you can see if the packets are coming back to you and if windows is dropping them for some reason. Charles Riley wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... I ran across a strange problem with one of our POPs the other day, and am in the process of researching/troubleshooting it. We have a configuration something like this: Internet---2500---AS5300---D/U Users Not shown is a LAN connected to the 2nd Ethernet on the 2500. All connections to the shared Ethernet are via a Kmart bluelight special hub. The connection to the Internet is a T-1 FR. Neither the 2500 nor the T-1 is anywhere close to being overloaded. We are not doing any content filtering, nor have any access lists been applied, nor are any sites blocked. The connection works great...email, web browsing, etc. all work just fine. The only problem is that users can only download UNIX and Mac flavored files, but not anything that smacks of Windows. For example, they can down the .gz/tar and .sft files for a SSH client for example, but can not download its .exe or .zip counterpart for Windows! Take the same .exe and .zip file, and rename it with a UNIX or Mac filename extension, and you can download it. Surprisingly enough, the problem does not lie with the users. I took a clean laptop to the site, and encountered the same results. Has anyone ever experienced a problem like this? Could this be a bug in the IOS on the 2500? Any suggestions would be welcome. TIA, Charles Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=62184t=62184 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
what the h... - strange problem - Cisco doesn't like Windows? [7:62144]
I ran across a strange problem with one of our POPs the other day, and am in the process of researching/troubleshooting it. We have a configuration something like this: Internet---2500---AS5300---D/U Users Not shown is a LAN connected to the 2nd Ethernet on the 2500. All connections to the shared Ethernet are via a Kmart bluelight special hub. The connection to the Internet is a T-1 FR. Neither the 2500 nor the T-1 is anywhere close to being overloaded. We are not doing any content filtering, nor have any access lists been applied, nor are any sites blocked. The connection works great...email, web browsing, etc. all work just fine. The only problem is that users can only download UNIX and Mac flavored files, but not anything that smacks of Windows. For example, they can down the .gz/tar and .sft files for a SSH client for example, but can not download its .exe or .zip counterpart for Windows! Take the same .exe and .zip file, and rename it with a UNIX or Mac filename extension, and you can download it. Surprisingly enough, the problem does not lie with the users. I took a clean laptop to the site, and encountered the same results. Has anyone ever experienced a problem like this? Could this be a bug in the IOS on the 2500? Any suggestions would be welcome. TIA, Charles Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=62144t=62144 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: what the h... - strange problem - Cisco doesn't like [7:62147]
load a packet sniffer on the laptop and see what really happens. If you don't have one I know of a good free one . You install libpcap first, reboot and then install analyzer. http://winpcap.polito.it/install/default.htm http://analyzer.polito.it/install/default.htm Then you can see if the packets are coming back to you and if windows is dropping them for some reason. Charles Riley wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... I ran across a strange problem with one of our POPs the other day, and am in the process of researching/troubleshooting it. We have a configuration something like this: Internet---2500---AS5300---D/U Users Not shown is a LAN connected to the 2nd Ethernet on the 2500. All connections to the shared Ethernet are via a Kmart bluelight special hub. The connection to the Internet is a T-1 FR. Neither the 2500 nor the T-1 is anywhere close to being overloaded. We are not doing any content filtering, nor have any access lists been applied, nor are any sites blocked. The connection works great...email, web browsing, etc. all work just fine. The only problem is that users can only download UNIX and Mac flavored files, but not anything that smacks of Windows. For example, they can down the .gz/tar and .sft files for a SSH client for example, but can not download its .exe or .zip counterpart for Windows! Take the same .exe and .zip file, and rename it with a UNIX or Mac filename extension, and you can download it. Surprisingly enough, the problem does not lie with the users. I took a clean laptop to the site, and encountered the same results. Has anyone ever experienced a problem like this? Could this be a bug in the IOS on the 2500? Any suggestions would be welcome. TIA, Charles Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=62147t=62147 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: what the h... - strange problem - Cisco doesn't like [7:62148]
Sorry, should have mentioned. I get the same result whether the user system is UNIX, Mac, or Windows...it plays havoc with .exe and .zip. That is a good suggestion, though, about the sniffer...that is about the only thing I haven't tried yet. The Kmart bluelight special hub is making me a little suspicious... Thanks, Charles Sam Sneed wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... load a packet sniffer on the laptop and see what really happens. If you don't have one I know of a good free one . You install libpcap first, reboot and then install analyzer. http://winpcap.polito.it/install/default.htm http://analyzer.polito.it/install/default.htm Then you can see if the packets are coming back to you and if windows is dropping them for some reason. Charles Riley wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... I ran across a strange problem with one of our POPs the other day, and am in the process of researching/troubleshooting it. We have a configuration something like this: Internet---2500---AS5300---D/U Users Not shown is a LAN connected to the 2nd Ethernet on the 2500. All connections to the shared Ethernet are via a Kmart bluelight special hub. The connection to the Internet is a T-1 FR. Neither the 2500 nor the T-1 is anywhere close to being overloaded. We are not doing any content filtering, nor have any access lists been applied, nor are any sites blocked. The connection works great...email, web browsing, etc. all work just fine. The only problem is that users can only download UNIX and Mac flavored files, but not anything that smacks of Windows. For example, they can down the .gz/tar and .sft files for a SSH client for example, but can not download its .exe or .zip counterpart for Windows! Take the same .exe and .zip file, and rename it with a UNIX or Mac filename extension, and you can download it. Surprisingly enough, the problem does not lie with the users. I took a clean laptop to the site, and encountered the same results. Has anyone ever experienced a problem like this? Could this be a bug in the IOS on the 2500? Any suggestions would be welcome. TIA, Charles Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=62148t=62148 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: what the h... - strange problem - Cisco doesn't like [7:62149]
That HUB doesn't know the difference between the various file name extensions and neither does the router. UNIX comes with tcpdump so there's no need to load the sniffer. Also run the debug command on the router to see if the packets are going through it if you don't see them getting to the UNIX box in tcpdump outputs. sounds like someone's content filtering upstream. Most admins will block .zip and exe but aren't concerned with the UNIX .tar and .gz variants. You'll know this for sure when you run the debug command on the router, Charles Riley wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Sorry, should have mentioned. I get the same result whether the user system is UNIX, Mac, or Windows...it plays havoc with .exe and .zip. That is a good suggestion, though, about the sniffer...that is about the only thing I haven't tried yet. The Kmart bluelight special hub is making me a little suspicious... Thanks, Charles Sam Sneed wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... load a packet sniffer on the laptop and see what really happens. If you don't have one I know of a good free one . You install libpcap first, reboot and then install analyzer. http://winpcap.polito.it/install/default.htm http://analyzer.polito.it/install/default.htm Then you can see if the packets are coming back to you and if windows is dropping them for some reason. Charles Riley wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... I ran across a strange problem with one of our POPs the other day, and am in the process of researching/troubleshooting it. We have a configuration something like this: Internet---2500---AS5300---D/U Users Not shown is a LAN connected to the 2nd Ethernet on the 2500. All connections to the shared Ethernet are via a Kmart bluelight special hub. The connection to the Internet is a T-1 FR. Neither the 2500 nor the T-1 is anywhere close to being overloaded. We are not doing any content filtering, nor have any access lists been applied, nor are any sites blocked. The connection works great...email, web browsing, etc. all work just fine. The only problem is that users can only download UNIX and Mac flavored files, but not anything that smacks of Windows. For example, they can down the .gz/tar and .sft files for a SSH client for example, but can not download its .exe or .zip counterpart for Windows! Take the same .exe and .zip file, and rename it with a UNIX or Mac filename extension, and you can download it. Surprisingly enough, the problem does not lie with the users. I took a clean laptop to the site, and encountered the same results. Has anyone ever experienced a problem like this? Could this be a bug in the IOS on the 2500? Any suggestions would be welcome. TIA, Charles Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=62149t=62149 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: what the h... - strange problem - Cisco doesn't like [7:62150]
Charles; Give us more detail. I'm taking you to say that dial-up users connect to a server somewhere on the Internet to download files. Any particular servers or any server out on the Internet? They are using FTP? Any difference between active or passive mode? You did not mention any servers at the POP location. Any strange MTU configured anywhere? -Original Message- From: Charles Riley [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 29, 2003 4:17 PM To: [EMAIL PROTECTED] Subject: what the h... - strange problem - Cisco doesn't like Windows? [7:62144] I ran across a strange problem with one of our POPs the other day, and am in the process of researching/troubleshooting it. We have a configuration something like this: Internet---2500---AS5300---D/U Users Not shown is a LAN connected to the 2nd Ethernet on the 2500. All connections to the shared Ethernet are via a Kmart bluelight special hub. The connection to the Internet is a T-1 FR. Neither the 2500 nor the T-1 is anywhere close to being overloaded. We are not doing any content filtering, nor have any access lists been applied, nor are any sites blocked. The connection works great...email, web browsing, etc. all work just fine. The only problem is that users can only download UNIX and Mac flavored files, but not anything that smacks of Windows. For example, they can down the .gz/tar and .sft files for a SSH client for example, but can not download its .exe or .zip counterpart for Windows! Take the same .exe and .zip file, and rename it with a UNIX or Mac filename extension, and you can download it. Surprisingly enough, the problem does not lie with the users. I took a clean laptop to the site, and encountered the same results. Has anyone ever experienced a problem like this? Could this be a bug in the IOS on the 2500? Any suggestions would be welcome. TIA, Charles Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=62150t=62150 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: what the h... - strange problem - Cisco doesn' [7:62148]
Consider your OSI layers. :-) A hub problem is very unlikely to cause such an issue. A generic router wouldn't either. This definitely seems like a Layer 7 problem. Someone is filtering on .exe and .zip. They just weren't smart enough to think about the UNIX and Mac equivalents. This could be an Intrustion Detection System or some sort of smart firewall. How are they downloading these? E-mail attachments maybe? Not letting users download .exe files via e-mail attachments might make a lot of sense as an e-mail server configuration. Anyway, start looking at Layer 7 and above (politics, policies). Question your Internet provider! Priscilla Charles Riley wrote: Sorry, should have mentioned. I get the same result whether the user system is UNIX, Mac, or Windows...it plays havoc with .exe and .zip. That is a good suggestion, though, about the sniffer...that is about the only thing I haven't tried yet. The Kmart bluelight special hub is making me a little suspicious... Thanks, Charles Sam Sneed wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... load a packet sniffer on the laptop and see what really happens. If you don't have one I know of a good free one . You install libpcap first, reboot and then install analyzer. http://winpcap.polito.it/install/default.htm http://analyzer.polito.it/install/default.htm Then you can see if the packets are coming back to you and if windows is dropping them for some reason. Charles Riley wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... I ran across a strange problem with one of our POPs the other day, and am in the process of researching/troubleshooting it. We have a configuration something like this: Internet---2500---AS5300---D/U Users Not shown is a LAN connected to the 2nd Ethernet on the 2500. All connections to the shared Ethernet are via a Kmart bluelight special hub. The connection to the Internet is a T-1 FR. Neither the 2500 nor the T-1 is anywhere close to being overloaded. We are not doing any content filtering, nor have any access lists been applied, nor are any sites blocked. The connection works great...email, web browsing, etc. all work just fine. The only problem is that users can only download UNIX and Mac flavored files, but not anything that smacks of Windows. For example, they can down the .gz/tar and .sft files for a SSH client for example, but can not download its .exe or .zip counterpart for Windows! Take the same .exe and .zip file, and rename it with a UNIX or Mac filename extension, and you can download it. Surprisingly enough, the problem does not lie with the users. I took a clean laptop to the site, and encountered the same results. Has anyone ever experienced a problem like this? Could this be a bug in the IOS on the 2500? Any suggestions would be welcome. TIA, Charles Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=62154t=62148 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: what the h... - strange problem - Cisco doesn't like [7:62155]
When you say, sounds like someone's content filtering upstream, are you talking about the frame provider? Geoff Mossburg -Original Message- From: Sam Sneed [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 29, 2003 5:50 PM To: [EMAIL PROTECTED] Subject: Re: what the h... - strange problem - Cisco doesn't like [7:62149] That HUB doesn't know the difference between the various file name extensions and neither does the router. UNIX comes with tcpdump so there's no need to load the sniffer. Also run the debug command on the router to see if the packets are going through it if you don't see them getting to the UNIX box in tcpdump outputs. sounds like someone's content filtering upstream. Most admins will block .zip and exe but aren't concerned with the UNIX .tar and .gz variants. You'll know this for sure when you run the debug command on the router, Charles Riley wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Sorry, should have mentioned. I get the same result whether the user system is UNIX, Mac, or Windows...it plays havoc with .exe and .zip. That is a good suggestion, though, about the sniffer...that is about the only thing I haven't tried yet. The Kmart bluelight special hub is making me a little suspicious... Thanks, Charles Sam Sneed wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... load a packet sniffer on the laptop and see what really happens. If you don't have one I know of a good free one . You install libpcap first, reboot and then install analyzer. http://winpcap.polito.it/install/default.htm http://analyzer.polito.it/install/default.htm Then you can see if the packets are coming back to you and if windows is dropping them for some reason. Charles Riley wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... I ran across a strange problem with one of our POPs the other day, and am in the process of researching/troubleshooting it. We have a configuration something like this: Internet---2500---AS5300---D/U Users Not shown is a LAN connected to the 2nd Ethernet on the 2500. All connections to the shared Ethernet are via a Kmart bluelight special hub. The connection to the Internet is a T-1 FR. Neither the 2500 nor the T-1 is anywhere close to being overloaded. We are not doing any content filtering, nor have any access lists been applied, nor are any sites blocked. The connection works great...email, web browsing, etc. all work just fine. The only problem is that users can only download UNIX and Mac flavored files, but not anything that smacks of Windows. For example, they can down the .gz/tar and .sft files for a SSH client for example, but can not download its .exe or .zip counterpart for Windows! Take the same .exe and .zip file, and rename it with a UNIX or Mac filename extension, and you can download it. Surprisingly enough, the problem does not lie with the users. I took a clean laptop to the site, and encountered the same results. Has anyone ever experienced a problem like this? Could this be a bug in the IOS on the 2500? Any suggestions would be welcome. TIA, Charles Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=62155t=62155 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: what the h... - strange problem - Cisco doesn't like [7:62163]
my money's on content filtering by your upstream. did this ever work? I wonder if this is a spillover from last weekend's port 1434 (saphire) attacks. could be that some upstream engineer started filtering everything Microsoft to stop network overload. Charles Riley wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... I ran across a strange problem with one of our POPs the other day, and am in the process of researching/troubleshooting it. We have a configuration something like this: Internet---2500---AS5300---D/U Users Not shown is a LAN connected to the 2nd Ethernet on the 2500. All connections to the shared Ethernet are via a Kmart bluelight special hub. The connection to the Internet is a T-1 FR. Neither the 2500 nor the T-1 is anywhere close to being overloaded. We are not doing any content filtering, nor have any access lists been applied, nor are any sites blocked. The connection works great...email, web browsing, etc. all work just fine. The only problem is that users can only download UNIX and Mac flavored files, but not anything that smacks of Windows. For example, they can down the .gz/tar and .sft files for a SSH client for example, but can not download its .exe or .zip counterpart for Windows! Take the same .exe and .zip file, and rename it with a UNIX or Mac filename extension, and you can download it. Surprisingly enough, the problem does not lie with the users. I took a clean laptop to the site, and encountered the same results. Has anyone ever experienced a problem like this? Could this be a bug in the IOS on the 2500? Any suggestions would be welcome. TIA, Charles Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=62163t=62163 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: VoIP+QoS+xDSL+H.323Gatekeeper [7:57121]
To paint you a better picture here is the scenerio...I am calling a number that I know will respond initially with a voice annoincement (ie. Voice mail system). When data is not flooding the wan link the call is fine. I get the entire announcement beginning with Thank you for calling xyz company, the nations leading provider of... When data IS flooding the wan link, the call eventually goes through but I hear the recording starting in the middle of the stream... leading provider of... In the second case, why wouldn't I hear the entire message, just delayed until the call set-up packets traversed the network? Mark S wrote in message news:200211081804.SAA07463;groupstudy.com... For those of you trying to email me from the link in the message, here is the updated post. Sorry about the duplicate. *** Well, this should give you enough to chew on since voice is becoming a hot topic. I am trying to configure VoIP with QoS. Why over IP and not over ATM, you say? I have to controll the call with a H.323 Gatekeeper, and that is IP. My problem appears to be that the call setup (or maybe signalling?) appears to be delayed. The test results are as follows: If the WAN link is saturated with data packets PRIOR to establishing the voice call, the first 10 to 15 (approximately) seconds of the call are lost. After the call is established, voice is rock solid and no voice packets are delayed or lost. If the voice call is established PRIOR to saturating the WAN link with data packets, the voice call is rock solid and no voice packets are delayed or lost. Thoughts or configs would be appreciated. --Mark version 12.2 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname Router ! logging buffered 4096 debugging ! memory-size iomem 25 ip subnet-zero ! no ip domain lookup ! ip cef ! voice call carrier capacity active voice rtp send-recv ! no voice hpi capture buffer no voice hpi capture destination ! vc-class atm vip vbr-rt 256 256 10 precedence 5 no bump traffic no protect vc no protect group ! vc-class atm normal vbr-nrt 192 192 precedence other no protect vc no protect group ! interface ATM0/0 ip address 1.1.1.254 255.255.255.0 ip nat outside no atm ilmi-keepalive bundle-enable bundle qosmap protocol ip 1.1.1.1 encapsulation aal5snap pvc-bundle data 0/37 class-vc normal pvc-bundle voice 0/36 class-vc vip ! dsl equipment-type CPE dsl operating-mode GSHDSL symmetric annex A dsl linerate AUTO h323-gateway voip interface h323-gateway voip id Gatekeeper ipaddr x.x.x.x 1718 h323-gateway voip h323-id Gateway ip rsvp bandwidth 64 64 ip rsvp resource-provider wfq pvc ! interface FastEthernet0/0 ip address 10.200.100.1 255.255.255.0 ip nat inside speed auto ! ip nat inside source list 1 interface ATM0/0 overload ip classless ip route 0.0.0.0 0.0.0.0 1.1.1.1 no ip http server ip pim bidir-enable ! access-list 1 permit 10.200.100.0 0.0.0.255 ! call rsvp-sync ! voice-port 2/0 station-id name StaID station-id number 111222 caller-id enable ! voice-port 2/1 station-id name StaID station-id number 111222 caller-id enable ! dial-peer cor custom ! dial-peer voice 1 voip destination-pattern T session target ras ! gateway ! line con 0 line aux 0 line vty 0 4 login ! no scheduler allocate end Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=57351t=57121 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: VoIP+QoS+xDSL+H.323Gatekeeper [7:57104]
Mark, I saw something similar to this on a customer's pilot of AVVID. The symptoms were such that if a call between IP phones was established prior to the traffic flood, everything worked just fine. If the traffic flood came first, the destination IP phone rang, but no voice packets were received by either phone, period. And, this was in a pure LAN environment! Looking at the display on the 7960s, we discovered that not one UDP packet was arriving at either phone! (The fact that the destination phone rang would seem to indicate that TCP traffic was arriving OK). Unfortunately there was no sniffer available to capture the traffic to dissect the problem. The fix was to change the parameters on the traffic generator. The customer was using Network Observer. It was a new tool for them. The traffic being generated was designated as raw ethernet frames. As soon as the traffic type was changed to TCP or any other selection, the problem disappeared. What are you using to saturate the WAN link? What I saw might trigger some observation in your network. Bruce Mark S wrote: Well, this should give you enough to chew on since voice is becoming a hot topic. I am trying to configure VoIP with QoS. Why over IP and not over ATM, you say? I have to controll the call with a H.323 Gatekeeper, and that is IP. My problem appears to be that the call setup (or maybe signalling?) appears to be delayed. The test results are as follows: If the WAN link is saturated with data packets PRIOR to establishing the voice call, the first 10 to 15 (approximately) seconds of the call are lost. After the call is established, voice is rock solid and no voice packets are delayed or lost. If the voice call is established PRIOR to saturating the WAN link with data packets, the voice call is rock solid and no voice packets are delayed or lost. Thoughts or configs would be appreciated. --Mark version 12.2 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname Router ! logging buffered 4096 debugging ! memory-size iomem 25 ip subnet-zero ! no ip domain lookup ! ip cef ! voice call carrier capacity active voice rtp send-recv ! no voice hpi capture buffer no voice hpi capture destination ! vc-class atm vip vbr-rt 256 256 10 precedence 5 no bump traffic no protect vc no protect group ! vc-class atm normal vbr-nrt 192 192 precedence other no protect vc no protect group ! interface ATM0/0 ip address 1.1.1.254 255.255.255.0 ip nat outside no atm ilmi-keepalive bundle-enable bundle qosmap protocol ip 1.1.1.1 encapsulation aal5snap pvc-bundle data 0/37 class-vc normal pvc-bundle voice 0/36 class-vc vip ! dsl equipment-type CPE dsl operating-mode GSHDSL symmetric annex A dsl linerate AUTO h323-gateway voip interface h323-gateway voip id Gatekeeper ipaddr x.x.x.x 1718 h323-gateway voip h323-id Gateway ip rsvp bandwidth 64 64 ip rsvp resource-provider wfq pvc ! interface FastEthernet0/0 ip address 10.200.100.1 255.255.255.0 ip nat inside speed auto ! ip nat inside source list 1 interface ATM0/0 overload ip classless ip route 0.0.0.0 0.0.0.0 1.1.1.1 no ip http server ip pim bidir-enable ! access-list 1 permit 10.200.100.0 0.0.0.255 ! call rsvp-sync ! voice-port 2/0 station-id name StaID station-id number 111222 caller-id enable ! voice-port 2/1 station-id name StaID station-id number 111222 caller-id enable ! dial-peer cor custom ! dial-peer voice 1 voip destination-pattern T session target ras ! gateway ! line con 0 line aux 0 line vty 0 4 login ! no scheduler allocate end -- Bruce Enders Email: [EMAIL PROTECTED] Chesapeake NetCraftsmeno:(410)-280-6927, c:(443)-994-0678 1290 Bay Dale Drive, Suite 312 WWW: http://www.netcraftsmen.net Arnold, MD 21012-2325 Cisco CCSI# 96047 Efax 443-331-0651 Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=57184t=57104 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
VoIP+QoS+xDSL+H.323Gatekeeper [7:57104]
Well, this should give you enough to chew on since voice is becoming a hot topic. I am trying to configure VoIP with QoS. Why over IP and not over ATM, you say? I have to controll the call with a H.323 Gatekeeper, and that is IP. My problem appears to be that the call setup (or maybe signalling?) appears to be delayed. The test results are as follows: If the WAN link is saturated with data packets PRIOR to establishing the voice call, the first 10 to 15 (approximately) seconds of the call are lost. After the call is established, voice is rock solid and no voice packets are delayed or lost. If the voice call is established PRIOR to saturating the WAN link with data packets, the voice call is rock solid and no voice packets are delayed or lost. Thoughts or configs would be appreciated. --Mark version 12.2 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname Router ! logging buffered 4096 debugging ! memory-size iomem 25 ip subnet-zero ! no ip domain lookup ! ip cef ! voice call carrier capacity active voice rtp send-recv ! no voice hpi capture buffer no voice hpi capture destination ! vc-class atm vip vbr-rt 256 256 10 precedence 5 no bump traffic no protect vc no protect group ! vc-class atm normal vbr-nrt 192 192 precedence other no protect vc no protect group ! interface ATM0/0 ip address 1.1.1.254 255.255.255.0 ip nat outside no atm ilmi-keepalive bundle-enable bundle qosmap protocol ip 1.1.1.1 encapsulation aal5snap pvc-bundle data 0/37 class-vc normal pvc-bundle voice 0/36 class-vc vip ! dsl equipment-type CPE dsl operating-mode GSHDSL symmetric annex A dsl linerate AUTO h323-gateway voip interface h323-gateway voip id Gatekeeper ipaddr x.x.x.x 1718 h323-gateway voip h323-id Gateway ip rsvp bandwidth 64 64 ip rsvp resource-provider wfq pvc ! interface FastEthernet0/0 ip address 10.200.100.1 255.255.255.0 ip nat inside speed auto ! ip nat inside source list 1 interface ATM0/0 overload ip classless ip route 0.0.0.0 0.0.0.0 1.1.1.1 no ip http server ip pim bidir-enable ! access-list 1 permit 10.200.100.0 0.0.0.255 ! call rsvp-sync ! voice-port 2/0 station-id name StaID station-id number 111222 caller-id enable ! voice-port 2/1 station-id name StaID station-id number 111222 caller-id enable ! dial-peer cor custom ! dial-peer voice 1 voip destination-pattern T session target ras ! gateway ! line con 0 line aux 0 line vty 0 4 login ! no scheduler allocate end Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=57104t=57104 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
VoIP+QoS+xDSL+H.323Gatekeeper [7:57121]
For those of you trying to email me from the link in the message, here is the updated post. Sorry about the duplicate. *** Well, this should give you enough to chew on since voice is becoming a hot topic. I am trying to configure VoIP with QoS. Why over IP and not over ATM, you say? I have to controll the call with a H.323 Gatekeeper, and that is IP. My problem appears to be that the call setup (or maybe signalling?) appears to be delayed. The test results are as follows: If the WAN link is saturated with data packets PRIOR to establishing the voice call, the first 10 to 15 (approximately) seconds of the call are lost. After the call is established, voice is rock solid and no voice packets are delayed or lost. If the voice call is established PRIOR to saturating the WAN link with data packets, the voice call is rock solid and no voice packets are delayed or lost. Thoughts or configs would be appreciated. --Mark version 12.2 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname Router ! logging buffered 4096 debugging ! memory-size iomem 25 ip subnet-zero ! no ip domain lookup ! ip cef ! voice call carrier capacity active voice rtp send-recv ! no voice hpi capture buffer no voice hpi capture destination ! vc-class atm vip vbr-rt 256 256 10 precedence 5 no bump traffic no protect vc no protect group ! vc-class atm normal vbr-nrt 192 192 precedence other no protect vc no protect group ! interface ATM0/0 ip address 1.1.1.254 255.255.255.0 ip nat outside no atm ilmi-keepalive bundle-enable bundle qosmap protocol ip 1.1.1.1 encapsulation aal5snap pvc-bundle data 0/37 class-vc normal pvc-bundle voice 0/36 class-vc vip ! dsl equipment-type CPE dsl operating-mode GSHDSL symmetric annex A dsl linerate AUTO h323-gateway voip interface h323-gateway voip id Gatekeeper ipaddr x.x.x.x 1718 h323-gateway voip h323-id Gateway ip rsvp bandwidth 64 64 ip rsvp resource-provider wfq pvc ! interface FastEthernet0/0 ip address 10.200.100.1 255.255.255.0 ip nat inside speed auto ! ip nat inside source list 1 interface ATM0/0 overload ip classless ip route 0.0.0.0 0.0.0.0 1.1.1.1 no ip http server ip pim bidir-enable ! access-list 1 permit 10.200.100.0 0.0.0.255 ! call rsvp-sync ! voice-port 2/0 station-id name StaID station-id number 111222 caller-id enable ! voice-port 2/1 station-id name StaID station-id number 111222 caller-id enable ! dial-peer cor custom ! dial-peer voice 1 voip destination-pattern T session target ras ! gateway ! line con 0 line aux 0 line vty 0 4 login ! no scheduler allocate end Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=57121t=57121 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: VoIP+QoS+xDSL+H.323Gatekeeper [7:57121]
Mark S wrote: For those of you trying to email me from the link in the message, here is the updated post. Hopefully people wouldn't mail you offlist! If they trust what they are saying, why don't they share it with ALL of us? :-) That's what the list is all about. Are you saying that instead of hearing the voice conversation, you hear silence for the first 10-15 seconds? That almost sounds like a software bug or even a hardware problem. I can't see anything in your config that would cause this, though maybe somebody else will. Even if you have busied out the WAN as you say, it's supposed to handle this correctly. If it was just a second or two of silence, I would say tune your Voice Activity Detection (VAD), but 10-15 seconds, that's really bizarre. Anyone else have some ideas? ___ Priscilla Oppenheimer www.troubleshootingnetworks.com www.priscilla.com Sorry about the duplicate. *** Well, this should give you enough to chew on since voice is becoming a hot topic. I am trying to configure VoIP with QoS. Why over IP and not over ATM, you say? I have to controll the call with a H.323 Gatekeeper, and that is IP. My problem appears to be that the call setup (or maybe signalling?) appears to be delayed. The test results are as follows: If the WAN link is saturated with data packets PRIOR to establishing the voice call, the first 10 to 15 (approximately) seconds of the call are lost. After the call is established, voice is rock solid and no voice packets are delayed or lost. If the voice call is established PRIOR to saturating the WAN link with data packets, the voice call is rock solid and no voice packets are delayed or lost. Thoughts or configs would be appreciated. --Mark version 12.2 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname Router ! logging buffered 4096 debugging ! memory-size iomem 25 ip subnet-zero ! no ip domain lookup ! ip cef ! voice call carrier capacity active voice rtp send-recv ! no voice hpi capture buffer no voice hpi capture destination ! vc-class atm vip vbr-rt 256 256 10 precedence 5 no bump traffic no protect vc no protect group ! vc-class atm normal vbr-nrt 192 192 precedence other no protect vc no protect group ! interface ATM0/0 ip address 1.1.1.254 255.255.255.0 ip nat outside no atm ilmi-keepalive bundle-enable bundle qosmap protocol ip 1.1.1.1 encapsulation aal5snap pvc-bundle data 0/37 class-vc normal pvc-bundle voice 0/36 class-vc vip ! dsl equipment-type CPE dsl operating-mode GSHDSL symmetric annex A dsl linerate AUTO h323-gateway voip interface h323-gateway voip id Gatekeeper ipaddr x.x.x.x 1718 h323-gateway voip h323-id Gateway ip rsvp bandwidth 64 64 ip rsvp resource-provider wfq pvc ! interface FastEthernet0/0 ip address 10.200.100.1 255.255.255.0 ip nat inside speed auto ! ip nat inside source list 1 interface ATM0/0 overload ip classless ip route 0.0.0.0 0.0.0.0 1.1.1.1 no ip http server ip pim bidir-enable ! access-list 1 permit 10.200.100.0 0.0.0.255 ! call rsvp-sync ! voice-port 2/0 station-id name StaID station-id number 111222 caller-id enable ! voice-port 2/1 station-id name StaID station-id number 111222 caller-id enable ! dial-peer cor custom ! dial-peer voice 1 voip destination-pattern T session target ras ! gateway ! line con 0 line aux 0 line vty 0 4 login ! no scheduler allocate end Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=57127t=57121 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: VoIP+QoS+xDSL+H.323Gatekeeper [7:57121]
That is correct--I hear silence when the data pvc is saturated. However, further tests performed just recently indicate that the amount of data saturating the link corresponds to the amount of lost voice packets. That is why I thought this was a QoS issue. It almost appears that some of the call control packets are going down the data pvc instead of the voice pvc. But I don't want to comit to such a statement for fear of biasing other opinions in the newsgroup, as others may have the real cause to the problem already figured out. I did explore an access-list config to match on port 1720 and there were some hits, but again are there other voice payload and/or voice signaling packets traversing the data pvc? I don't know. --Mark Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=57133t=57121 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: VoIP+QoS+xDSL+H.323Gatekeeper [7:57121]
Mark, It sounds like the voice traffic is being prioritized correctly since the voice is rock solid after the connection is made. Looking at your config this is strange as the default IP Precedence should be 0 for voice traffic and I do not see where you have specified this in your dial peer. Based on your explanation I would expect to see something like: dial-peer voice 1 voip destination-pattern . session target ... ip qos dscp cs5 media -or- dial-peer voice 1 voip destination-pattern . session target ... ip precedence 5 With the classification statements missing from your configuration, I would expect voice to be choppy and unintelligible. The default classification for router-originated voice traffic is supposed to be ip precedence of 0 (DSCP=00). Perhaps Cisco has changed this in the latest IOS releases? You should also have ip qos dscp cs5 signaling present in your dial-peer configuration to identify the signalling traffic as having IP precedence=5 so that it is classified correctly and sent down your voice PVC. As it stands now, your signalling traffic should be using your data PVC. You can find some decent QoS configuration examples on Cisco's web site relating to LLQ which might also help along these lines. Cisco usually recommends setting signaling to af31 and media to ef (to make sure that if signaling and media contend for bandwidth voice quality is not affected). Since your configuration is already classifying explicitly on ip precedence=5, it might just be simpler to set the ip precedence of both media and signaling traffic to 5. I hope this helps. :) - Tom Mark S wrote: For those of you trying to email me from the link in the message, here is the updated post. Sorry about the duplicate. *** Well, this should give you enough to chew on since voice is becoming a hot topic. I am trying to configure VoIP with QoS. Why over IP and not over ATM, you say? I have to controll the call with a H.323 Gatekeeper, and that is IP. My problem appears to be that the call setup (or maybe signalling?) appears to be delayed. The test results are as follows: If the WAN link is saturated with data packets PRIOR to establishing the voice call, the first 10 to 15 (approximately) seconds of the call are lost. After the call is established, voice is rock solid and no voice packets are delayed or lost. If the voice call is established PRIOR to saturating the WAN link with data packets, the voice call is rock solid and no voice packets are delayed or lost. Thoughts or configs would be appreciated. --Mark version 12.2 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname Router ! logging buffered 4096 debugging ! memory-size iomem 25 ip subnet-zero ! no ip domain lookup ! ip cef ! voice call carrier capacity active voice rtp send-recv ! no voice hpi capture buffer no voice hpi capture destination ! vc-class atm vip vbr-rt 256 256 10 precedence 5 no bump traffic no protect vc no protect group ! vc-class atm normal vbr-nrt 192 192 precedence other no protect vc no protect group ! interface ATM0/0 ip address 1.1.1.254 255.255.255.0 ip nat outside no atm ilmi-keepalive bundle-enable bundle qosmap protocol ip 1.1.1.1 encapsulation aal5snap pvc-bundle data 0/37 class-vc normal pvc-bundle voice 0/36 class-vc vip ! dsl equipment-type CPE dsl operating-mode GSHDSL symmetric annex A dsl linerate AUTO h323-gateway voip interface h323-gateway voip id Gatekeeper ipaddr x.x.x.x 1718 h323-gateway voip h323-id Gateway ip rsvp bandwidth 64 64 ip rsvp resource-provider wfq pvc ! interface FastEthernet0/0 ip address 10.200.100.1 255.255.255.0 ip nat inside speed auto ! ip nat inside source list 1 interface ATM0/0 overload ip classless ip route 0.0.0.0 0.0.0.0 1.1.1.1 no ip http server ip pim bidir-enable ! access-list 1 permit 10.200.100.0 0.0.0.255 ! call rsvp-sync ! voice-port 2/0 station-id name StaID station-id number 111222 caller-id enable ! voice-port 2/1 station-id name StaID station-id number 111222 caller-id enable ! dial-peer cor custom ! dial-peer voice 1 voip destination-pattern T session target ras ! gateway ! line con 0 line aux 0 line vty 0 4 login ! no scheduler allocate end Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=57139t=57121 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: VoIP+QoS+xDSL+H.323Gatekeeper [7:57121]
Yeah, sorry about that. I added the following: ip qos dscp cs5 media ip qos dscp cs5 signaling to my dial-peer after the original post. Unfortunately, same result. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=57141t=57121 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: VoIP+QoS+xDSL+H.323Gatekeeper [7:57121]
Related to the topic, but maybe not to your question. How do you manage the call accounting from the gatekeeper? As far as I know the gatekeeper calculates the AcctSessionTime from the time beetwenn the LCF (Location Confirm) and the Call Disengage Request. Well this results that the call duration logged from the gatekeeper would be longer that the call duration logged from the gateways.(it will include the call setup time as well). I have faced this problem once but didn't find the solution. Thanks, Hamid That is correct--I hear silence when the data pvc is saturated. However, further tests performed just recently indicate that the amount of data saturating the link corresponds to the amount of lost voice packets. That is why I thought this was a QoS issue. It almost appears that some of the call control packets are going down the data pvc instead of the voice pvc. But I don't want to comit to such a statement for fear of biasing other opinions in the newsgroup, as others may have the real cause to the problem already figured out. I did explore an access-list config to match on port 1720 and there were some hits, but again are there other voice payload and/or voice signaling packets traversing the data pvc? I don't know. --Mark Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=57142t=57121 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: VoIP+QoS+xDSL+H.323Gatekeeper [7:57121]
Hamid, Well there are two different ways that you can look at this. From the telco side one may conclude that the entire duration of the call is the actual cost of the call, including call setup. From the customer side, the majority of customers would argue that call setup should not be billed, as that is not part of the actual voice conversation. However, ultimately, all costs are eventually passed to the consumer. Unfortunately, this doesn't directly answer your question but does explain the two theories. I don't get into call accounting too much. --Mark Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=57144t=57121 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
How many H.323 clients can 3640 as gatekeeper handle? [7:46877]
Dear group, do you have an answer for the question mentioned in obj? Thanks in advance! Teresa Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=46877t=46877 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: How many H.323 clients can 3640 as gatekeeper handle? [7:46881]
According to the link below, 10,000 is max number of local registrations. http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fvvf ax_c/vvf323gk.htm -- RFC 1149 Compliant. TP wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Dear group, do you have an answer for the question mentioned in obj? Thanks in advance! Teresa Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=46881t=46881 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Wanted!! Cisco CallManager 3.1 or 3.2 S/W for H/lab [7:42539]
Please reply directed. I am interested in purchasing a proper CCM CDs preferably with the installation books. Will pay for shipment and I am UK based. George. P.S. Anybody sat the 3.2 exams? Your views please. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=42539t=42539 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: ISL Trunking from a h/w's perspective [7:39246]
Answer #1 Sc0 is a virtual port. Think of it as a mini-PC in your switch that provides an address for management functions such as telnet. If you have physical access to your switch then the console port is the easiest way to configure your switch. If Sc0 is configured on the switch and you can connect to a link or port connected to the switch then you can telnet to the switch to configure it. Answer #2 If your question is really something like I have a Cat5K with a Sup III blade that does not have any interface module - how do I configure trunking to this switch? It depends on what other ports exist on the switch. Do a show port capabilities for each module. It will show if the module can be used for ISL trunking. Side note: Sup III interface modules come up on eBay from time to time. -Original Message- From: George Siaw [mailto:[EMAIL PROTECTED]] Sent: Friday, March 22, 2002 5:45 PM To: [EMAIL PROTECTED] Subject: ISL Trunking from a h/w's perspective [7:39246] Guys, Any ideas as how I can configure isl trunking without an Sc0 port on the supervisor engines? Can I configure on of the ports to assume this position i.e. Sc0? If so what are the cmds? Regards, George. Configs as below: Console (enable) sh mod 1 Mod Module-Name Ports Module-Type Model Serial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2 4.3(1a) Mod Sub-Type Sub-Model Sub-Serial Sub-Hw --- - -- -- 1 NFFC+WS-F5531 0012153640 1.0 Console (enable) sh mod Mod Module-Name Ports Module-Type Model Serial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok 2 ENGINE-20 Supervisor IIIWS-X5530 010867093 standby 3 CCIE_LAB-0 2410/100BaseTX Ethernet WS-X5224 012154555 ok 4 CCIE_LAB-1 2410/100BaseTX Ethernet WS-X5224 009616952 ok 5 CCIE_LAB-2 2410/100BaseTX Ethernet WS-X5224 016372420 ok Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2 4.3(1a) 2 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 2.03.1.2 4.3(1a) 3 00-50-53-c4-42-08 to 00-50-53-c4-42-1f 1.43.1(1) 4.3(1a) 4 00-10-7b-83-36-d8 to 00-10-7b-83-36-ef 1.43.1(1) 4.3(1a) 5 00-30-b6-29-95-48 to 00-30-b6-29-95-5f 1.53.1(1) 4.3(1a) Mod Sub-Type Sub-Model Sub-Serial Sub-Hw --- - -- -- 1 NFFC+WS-F5531 0012153640 1.0 2 NFFC WS-F5521 0010866222 1.1 Console (enable) sh ver WS-C5505 Software, Version McpSW: 4.3(1a) NmpSW: 4.3(1a) Copyright (c) 1995-1998 by Cisco Systems NMP S/W compiled on Nov 23 1998, 15:22:34 MCP S/W compiled on Nov 23 1998, 15:19:30 System Bootstrap Version: 3.1.2 Hardware Version: 1.0 Model: WS-C5505 Serial #: 066526573 Mod Port Model Serial # Versions --- -- - 1 0WS-X5530 012144234 Hw : 3.0 Fw : 3.1.2 Fw1: 4.2(1) Sw : 4.3(1a) 2 0WS-X5530 010867093 Hw : 2.0 Fw : 3.1.2 Fw1: 4.2(1) Sw : 4.3(1a) 3 24 WS-X5224 012154555 Hw : 1.4 Fw : 3.1(1) Sw : 4.3(1a) 4 24 WS-X5224 009616952 Hw : 1.4 Fw : 3.1(1) Sw : 4.3(1a) 5 24 WS-X5224 016372420 Hw : 1.5 Fw : 3.1(1) Sw : 4.3(1a) DRAMFLASH NVRAM Module Total UsedFreeTotal UsedFreeTotal Used Free -- --- --- --- --- --- --- - - - 1 32640K 13381K 19259K 8192K 3984K 4208K 512K 116K 396K Uptime is 0 day, 0 hour, 13 minutes Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=39266t=39246 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct
RE: ISL Trunking from a h/w's perspective [7:39246]
Danny Andaluz, CCNP - It will work. did it on a 2611. Ci$co, won't support it and obviously they want you to buy more expensive 100 Mbps ports/routers (even if my total of 4 vlans uses 1mbps) Why do you believe everything cisco tells you ? Most of their tech docs were written by people that have never had beyond level 1 on a production router. Would you take make out advice from the loser geek virgin ? Business advice from Enron ? You must unlearn what you have learned. - yoda Joseph Brunner ASN 21572 MortgageIT MITLending New York, NY 10038 (212) 651 - 7695 Voice -Original Message- From: MADMAN [mailto:[EMAIL PROTECTED]] Sent: Friday, March 22, 2002 11:08 PM To: [EMAIL PROTECTED] Subject: Re: ISL Trunking from a h/w's perspective [7:39246] I don't know what else you want me to do to prove it. This was true at one time but it has changed. I have personally not tried this config and seen it work but if I have some time on Monday I'll confirm whether or not the 3660 will do as advertised. Dave Danny Andaluz, CCNP wrote: no you can't. I got straight from cisco that they have to be 100 meg full-dux interfaces. MADMAN wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Actually on some platforms with the right IOS you can trunk 10 meg ports: C3660B(config)#inter e2/0.1 C3660B(config-subif)#encap dot1 1 C3660B(config-subif)# Dave danny wrote: The router's ethernet must be 100 full dux. You configure subinterfaces on the ethernet. a trunking protocol must be configured on each sub with the corresponding vlan #. The router will route between Vlans. Hope this helps. Danny George Siaw wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Thanks for all your responses. One last question though. For external router, routing between vlans if I have just one FastEthernet interface on the router can I route between vlans? George. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Scott H. Sent: 23 March 2002 00:53 To: [EMAIL PROTECTED] Subject: Re: ISL Trunking from a h/w's perspective [7:39246] The only time the SC0 interface comes into play is for telnet into the box. If you have any 100 MB ports on your switch, you can run trunking. set trunk (mod/port) on isl If this trunk is running into a router, you need to create the subinterfaces on the router to enable routing between VLANS. int fa1/0.100 ip address (the subnet of the vlan) encap isl (the vlan #) HTH, Scott George Siaw wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Do I need an Sc0 port when routing between Vlans? However, there's no uplink module on neither of my supervisor engines. Would you know a s/w work around without having to buy the module? George. -Original Message- From: Larry Letterman [mailto:[EMAIL PROTECTED]] Sent: 23 March 2002 00:17 To: George Siaw; [EMAIL PROTECTED] Subject: RE: ISL Trunking from a h/w's perspective [7:39246] You dont have to configure SC0 interface to do isl or dot1q. Its only needed for management, telnet etc... Larry Letterman Cisco Systems [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of George Siaw Sent: Friday, March 22, 2002 3:45 PM To: [EMAIL PROTECTED] Subject: ISL Trunking from a h/w's perspective [7:39246] Guys, Any ideas as how I can configure isl trunking without an Sc0 port on the supervisor engines? Can I configure on of the ports to assume this position i.e. Sc0? If so what are the cmds? Regards, George. Configs as below: Console (enable) sh mod 1 Mod Module-Name Ports Module-Type Model Serial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2 4.3(1a) Mod Sub-Type Sub-Model Sub-Serial Sub-Hw --- - -- -- 1 NFFC+WS-F5531 0012153640 1.0 Console (enable) sh mod Mod Module-Name Ports Module-Type Model Serial-Num Status --- --- - - - -
Re: ISL Trunking from a h/w's perspective [7:39246]
I don't know why your so bitter but posting in such a vitriolic manner using sentences that make no sense assuming things about me that you don't know make you look foolish. But have a great day, life is too fleeting to be so dour!!! Dave Joseph Brunner wrote: Danny Andaluz, CCNP - It will work. did it on a 2611. Ci$co, won't support it and obviously they want you to buy more expensive 100 Mbps ports/routers (even if my total of 4 vlans uses 1mbps) Why do you believe everything cisco tells you ? Most of their tech docs were written by people that have never had beyond level 1 on a production router. Would you take make out advice from the loser geek virgin ? Business advice from Enron ? You must unlearn what you have learned. - yoda Joseph Brunner ASN 21572 MortgageIT MITLending New York, NY 10038 (212) 651 - 7695 Voice -Original Message- From: MADMAN [mailto:[EMAIL PROTECTED]] Sent: Friday, March 22, 2002 11:08 PM To: [EMAIL PROTECTED] Subject: Re: ISL Trunking from a h/w's perspective [7:39246] I don't know what else you want me to do to prove it. This was true at one time but it has changed. I have personally not tried this config and seen it work but if I have some time on Monday I'll confirm whether or not the 3660 will do as advertised. Dave Danny Andaluz, CCNP wrote: no you can't. I got straight from cisco that they have to be 100 meg full-dux interfaces. MADMAN wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Actually on some platforms with the right IOS you can trunk 10 meg ports: C3660B(config)#inter e2/0.1 C3660B(config-subif)#encap dot1 1 C3660B(config-subif)# Dave danny wrote: The router's ethernet must be 100 full dux. You configure subinterfaces on the ethernet. a trunking protocol must be configured on each sub with the corresponding vlan #. The router will route between Vlans. Hope this helps. Danny George Siaw wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Thanks for all your responses. One last question though. For external router, routing between vlans if I have just one FastEthernet interface on the router can I route between vlans? George. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Scott H. Sent: 23 March 2002 00:53 To: [EMAIL PROTECTED] Subject: Re: ISL Trunking from a h/w's perspective [7:39246] The only time the SC0 interface comes into play is for telnet into the box. If you have any 100 MB ports on your switch, you can run trunking. set trunk (mod/port) on isl If this trunk is running into a router, you need to create the subinterfaces on the router to enable routing between VLANS. int fa1/0.100 ip address (the subnet of the vlan) encap isl (the vlan #) HTH, Scott George Siaw wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Do I need an Sc0 port when routing between Vlans? However, there's no uplink module on neither of my supervisor engines. Would you know a s/w work around without having to buy the module? George. -Original Message- From: Larry Letterman [mailto:[EMAIL PROTECTED]] Sent: 23 March 2002 00:17 To: George Siaw; [EMAIL PROTECTED] Subject: RE: ISL Trunking from a h/w's perspective [7:39246] You dont have to configure SC0 interface to do isl or dot1q. Its only needed for management, telnet etc... Larry Letterman Cisco Systems [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of George Siaw Sent: Friday, March 22, 2002 3:45 PM To: [EMAIL PROTECTED] Subject: ISL Trunking from a h/w's perspective [7:39246] Guys, Any ideas as how I can configure isl trunking without an Sc0 port on the supervisor engines? Can I configure on of the ports to assume this position i.e. Sc0? If so what are the cmds? Regards, George. Configs as below: Console (enable) sh mod 1 Mod Module-Name Ports Module-Type Model Serial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-50
Re: ISL Trunking from a h/w's perspective [7:39246]
described. The information you received from Cisco pertains to ISL trunks, which require a 100mb interface. This was a good discussion. When I took my switching course, three years ago, they were quite adamant that trunking could not be done on a 10 mb interface. Of course, that was before dot1q was available on the routers. If someone took their courses a while back then they probably aren't aware of the changes. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=39293t=39246 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: ISL Trunking from a h/w's perspective [7:39246]
dude...what elce can I guy do to show you that it works heh... That's ios right there in his example... I would hate to think he typed it in notepad and cut and pasted...C'mon Danny Andaluz, CCNP 03/22/02 10:24PM no you can't. I got straight from cisco that they have to be 100 meg full-dux interfaces. MADMAN wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Actually on some platforms with the right IOS you can trunk 10 meg ports: C3660B(config)#inter e2/0.1 C3660B(config-subif)#encap dot1 1 C3660B(config-subif)# Dave danny wrote: The router's ethernet must be 100 full dux. You configure subinterfaces on the ethernet. a trunking protocol must be configured on each sub with the corresponding vlan #. The router will route between Vlans. Hope this helps. Danny George Siaw wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Thanks for all your responses. One last question though. For external router, routing between vlans if I have just one FastEthernet interface on the router can I route between vlans? George. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Scott H. Sent: 23 March 2002 00:53 To: [EMAIL PROTECTED] Subject: Re: ISL Trunking from a h/w's perspective [7:39246] The only time the SC0 interface comes into play is for telnet into the box. If you have any 100 MB ports on your switch, you can run trunking. set trunk (mod/port) on isl If this trunk is running into a router, you need to create the subinterfaces on the router to enable routing between VLANS. int fa1/0.100 ip address (the subnet of the vlan) encap isl (the vlan #) HTH, Scott George Siaw wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Do I need an Sc0 port when routing between Vlans? However, there's no uplink module on neither of my supervisor engines. Would you know a s/w work around without having to buy the module? George. -Original Message- From: Larry Letterman [mailto:[EMAIL PROTECTED]] Sent: 23 March 2002 00:17 To: George Siaw; [EMAIL PROTECTED] Subject: RE: ISL Trunking from a h/w's perspective [7:39246] You dont have to configure SC0 interface to do isl or dot1q. Its only needed for management, telnet etc... Larry Letterman Cisco Systems [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of George Siaw Sent: Friday, March 22, 2002 3:45 PM To: [EMAIL PROTECTED] Subject: ISL Trunking from a h/w's perspective [7:39246] Guys, Any ideas as how I can configure isl trunking without an Sc0 port on the supervisor engines? Can I configure on of the ports to assume this position i.e. Sc0? If so what are the cmds? Regards, George. Configs as below: Console (enable) sh mod 1 Mod Module-Name Ports Module-Type Model Serial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2 4.3(1a) Mod Sub-Type Sub-Model Sub-Serial Sub-Hw --- - -- -- 1 NFFC+WS-F5531 0012153640 1.0 Console (enable) sh mod Mod Module-Name Ports Module-Type Model Serial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok 2 ENGINE-20 Supervisor IIIWS-X5530 010867093 standby 3 CCIE_LAB-0 2410/100BaseTX Ethernet WS-X5224 012154555 ok 4 CCIE_LAB-1 2410/100BaseTX Ethernet WS-X5224 009616952 ok 5 CCIE_LAB-2 2410/100BaseTX Ethernet WS-X5224 016372420 ok Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2 4.3(1a) 2 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 2.03.1.2 4.3(1a) 3 00-50-53-c4-42-08 to 00-50-53-c4-42-1f 1.43.1(1) 4.3(1a) 4 00-10-7b-83-36-d8 to 00-10-7b-83-36-ef 1.43.1(1) 4.3(1a) 5 00-30-b6-29-95-48 to 00-30-b6-29-95-5f
ISL Trunking from a h/w's perspective [7:39246]
Guys, Any ideas as how I can configure isl trunking without an Sc0 port on the supervisor engines? Can I configure on of the ports to assume this position i.e. Sc0? If so what are the cmds? Regards, George. Configs as below: Console (enable) sh mod 1 Mod Module-Name Ports Module-Type ModelSerial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2 4.3(1a) Mod Sub-Type Sub-Model Sub-Serial Sub-Hw --- - -- -- 1 NFFC+WS-F5531 0012153640 1.0 Console (enable) sh mod Mod Module-Name Ports Module-Type ModelSerial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok 2 ENGINE-20 Supervisor IIIWS-X5530 010867093 standby 3 CCIE_LAB-0 2410/100BaseTX Ethernet WS-X5224 012154555 ok 4 CCIE_LAB-1 2410/100BaseTX Ethernet WS-X5224 009616952 ok 5 CCIE_LAB-2 2410/100BaseTX Ethernet WS-X5224 016372420 ok Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2 4.3(1a) 2 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 2.03.1.2 4.3(1a) 3 00-50-53-c4-42-08 to 00-50-53-c4-42-1f 1.43.1(1) 4.3(1a) 4 00-10-7b-83-36-d8 to 00-10-7b-83-36-ef 1.43.1(1) 4.3(1a) 5 00-30-b6-29-95-48 to 00-30-b6-29-95-5f 1.53.1(1) 4.3(1a) Mod Sub-Type Sub-Model Sub-Serial Sub-Hw --- - -- -- 1 NFFC+WS-F5531 0012153640 1.0 2 NFFC WS-F5521 0010866222 1.1 Console (enable) sh ver WS-C5505 Software, Version McpSW: 4.3(1a) NmpSW: 4.3(1a) Copyright (c) 1995-1998 by Cisco Systems NMP S/W compiled on Nov 23 1998, 15:22:34 MCP S/W compiled on Nov 23 1998, 15:19:30 System Bootstrap Version: 3.1.2 Hardware Version: 1.0 Model: WS-C5505 Serial #: 066526573 Mod Port Model Serial # Versions --- -- - 1 0WS-X5530 012144234 Hw : 3.0 Fw : 3.1.2 Fw1: 4.2(1) Sw : 4.3(1a) 2 0WS-X5530 010867093 Hw : 2.0 Fw : 3.1.2 Fw1: 4.2(1) Sw : 4.3(1a) 3 24 WS-X5224 012154555 Hw : 1.4 Fw : 3.1(1) Sw : 4.3(1a) 4 24 WS-X5224 009616952 Hw : 1.4 Fw : 3.1(1) Sw : 4.3(1a) 5 24 WS-X5224 016372420 Hw : 1.5 Fw : 3.1(1) Sw : 4.3(1a) DRAMFLASH NVRAM Module Total UsedFreeTotal UsedFreeTotal Used Free -- --- --- --- --- --- --- - - - 1 32640K 13381K 19259K 8192K 3984K 4208K 512K 116K 396K Uptime is 0 day, 0 hour, 13 minutes Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=39246t=39246 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: ISL Trunking from a h/w's perspective [7:39246]
Any ideas as how I can configure isl trunking without an Sc0 port on the supervisor engines? Your question is not clear. The SC0 port isn't relevant if you are using trunking to connect two switches. All you have to do is SET TRUNK mod/port ON on both switches and you are done. If you are talking about routing between VLAN's then you need an RSM or a router that is capable of ISL routing (2621 or better). Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=39247t=39246 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: ISL Trunking from a h/w's perspective [7:39246]
You dont have to configure SC0 interface to do isl or dot1q. Its only needed for management, telnet etc... Larry Letterman Cisco Systems [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of George Siaw Sent: Friday, March 22, 2002 3:45 PM To: [EMAIL PROTECTED] Subject: ISL Trunking from a h/w's perspective [7:39246] Guys, Any ideas as how I can configure isl trunking without an Sc0 port on the supervisor engines? Can I configure on of the ports to assume this position i.e. Sc0? If so what are the cmds? Regards, George. Configs as below: Console (enable) sh mod 1 Mod Module-Name Ports Module-Type ModelSerial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2 4.3(1a) Mod Sub-Type Sub-Model Sub-Serial Sub-Hw --- - -- -- 1 NFFC+WS-F5531 0012153640 1.0 Console (enable) sh mod Mod Module-Name Ports Module-Type ModelSerial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok 2 ENGINE-20 Supervisor IIIWS-X5530 010867093 standby 3 CCIE_LAB-0 2410/100BaseTX Ethernet WS-X5224 012154555 ok 4 CCIE_LAB-1 2410/100BaseTX Ethernet WS-X5224 009616952 ok 5 CCIE_LAB-2 2410/100BaseTX Ethernet WS-X5224 016372420 ok Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2 4.3(1a) 2 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 2.03.1.2 4.3(1a) 3 00-50-53-c4-42-08 to 00-50-53-c4-42-1f 1.43.1(1) 4.3(1a) 4 00-10-7b-83-36-d8 to 00-10-7b-83-36-ef 1.43.1(1) 4.3(1a) 5 00-30-b6-29-95-48 to 00-30-b6-29-95-5f 1.53.1(1) 4.3(1a) Mod Sub-Type Sub-Model Sub-Serial Sub-Hw --- - -- -- 1 NFFC+WS-F5531 0012153640 1.0 2 NFFC WS-F5521 0010866222 1.1 Console (enable) sh ver WS-C5505 Software, Version McpSW: 4.3(1a) NmpSW: 4.3(1a) Copyright (c) 1995-1998 by Cisco Systems NMP S/W compiled on Nov 23 1998, 15:22:34 MCP S/W compiled on Nov 23 1998, 15:19:30 System Bootstrap Version: 3.1.2 Hardware Version: 1.0 Model: WS-C5505 Serial #: 066526573 Mod Port Model Serial # Versions --- -- - 1 0WS-X5530 012144234 Hw : 3.0 Fw : 3.1.2 Fw1: 4.2(1) Sw : 4.3(1a) 2 0WS-X5530 010867093 Hw : 2.0 Fw : 3.1.2 Fw1: 4.2(1) Sw : 4.3(1a) 3 24 WS-X5224 012154555 Hw : 1.4 Fw : 3.1(1) Sw : 4.3(1a) 4 24 WS-X5224 009616952 Hw : 1.4 Fw : 3.1(1) Sw : 4.3(1a) 5 24 WS-X5224 016372420 Hw : 1.5 Fw : 3.1(1) Sw : 4.3(1a) DRAMFLASH NVRAM Module Total UsedFreeTotal UsedFreeTotal Used Free -- --- --- --- --- --- --- - - - 1 32640K 13381K 19259K 8192K 3984K 4208K 512K 116K 396K Uptime is 0 day, 0 hour, 13 minutes Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=39250t=39246 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: ISL Trunking from a h/w's perspective [7:39246]
Do I need an Sc0 port when routing between Vlans? However, there's no uplink module on neither of my supervisor engines. Would you know a s/w work around without having to buy the module? George. -Original Message- From: Larry Letterman [mailto:[EMAIL PROTECTED]] Sent: 23 March 2002 00:17 To: George Siaw; [EMAIL PROTECTED] Subject: RE: ISL Trunking from a h/w's perspective [7:39246] You dont have to configure SC0 interface to do isl or dot1q. Its only needed for management, telnet etc... Larry Letterman Cisco Systems [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of George Siaw Sent: Friday, March 22, 2002 3:45 PM To: [EMAIL PROTECTED] Subject: ISL Trunking from a h/w's perspective [7:39246] Guys, Any ideas as how I can configure isl trunking without an Sc0 port on the supervisor engines? Can I configure on of the ports to assume this position i.e. Sc0? If so what are the cmds? Regards, George. Configs as below: Console (enable) sh mod 1 Mod Module-Name Ports Module-Type ModelSerial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2 4.3(1a) Mod Sub-Type Sub-Model Sub-Serial Sub-Hw --- - -- -- 1 NFFC+WS-F5531 0012153640 1.0 Console (enable) sh mod Mod Module-Name Ports Module-Type ModelSerial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok 2 ENGINE-20 Supervisor IIIWS-X5530 010867093 standby 3 CCIE_LAB-0 2410/100BaseTX Ethernet WS-X5224 012154555 ok 4 CCIE_LAB-1 2410/100BaseTX Ethernet WS-X5224 009616952 ok 5 CCIE_LAB-2 2410/100BaseTX Ethernet WS-X5224 016372420 ok Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2 4.3(1a) 2 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 2.03.1.2 4.3(1a) 3 00-50-53-c4-42-08 to 00-50-53-c4-42-1f 1.43.1(1) 4.3(1a) 4 00-10-7b-83-36-d8 to 00-10-7b-83-36-ef 1.43.1(1) 4.3(1a) 5 00-30-b6-29-95-48 to 00-30-b6-29-95-5f 1.53.1(1) 4.3(1a) Mod Sub-Type Sub-Model Sub-Serial Sub-Hw --- - -- -- 1 NFFC+WS-F5531 0012153640 1.0 2 NFFC WS-F5521 0010866222 1.1 Console (enable) sh ver WS-C5505 Software, Version McpSW: 4.3(1a) NmpSW: 4.3(1a) Copyright (c) 1995-1998 by Cisco Systems NMP S/W compiled on Nov 23 1998, 15:22:34 MCP S/W compiled on Nov 23 1998, 15:19:30 System Bootstrap Version: 3.1.2 Hardware Version: 1.0 Model: WS-C5505 Serial #: 066526573 Mod Port Model Serial # Versions --- -- - 1 0WS-X5530 012144234 Hw : 3.0 Fw : 3.1.2 Fw1: 4.2(1) Sw : 4.3(1a) 2 0WS-X5530 010867093 Hw : 2.0 Fw : 3.1.2 Fw1: 4.2(1) Sw : 4.3(1a) 3 24 WS-X5224 012154555 Hw : 1.4 Fw : 3.1(1) Sw : 4.3(1a) 4 24 WS-X5224 009616952 Hw : 1.4 Fw : 3.1(1) Sw : 4.3(1a) 5 24 WS-X5224 016372420 Hw : 1.5 Fw : 3.1(1) Sw : 4.3(1a) DRAMFLASH NVRAM Module Total UsedFreeTotal UsedFreeTotal Used Free -- --- --- --- --- --- --- - - - 1 32640K 13381K 19259K 8192K 3984K 4208K 512K 116K 396K Uptime is 0 day, 0 hour, 13 minutes _ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=39251t=39246 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: ISL Trunking from a h/w's perspective [7:39246]
The only time the SC0 interface comes into play is for telnet into the box. If you have any 100 MB ports on your switch, you can run trunking. set trunk (mod/port) on isl If this trunk is running into a router, you need to create the subinterfaces on the router to enable routing between VLANS. int fa1/0.100 ip address (the subnet of the vlan) encap isl (the vlan #) HTH, Scott George Siaw wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Do I need an Sc0 port when routing between Vlans? However, there's no uplink module on neither of my supervisor engines. Would you know a s/w work around without having to buy the module? George. -Original Message- From: Larry Letterman [mailto:[EMAIL PROTECTED]] Sent: 23 March 2002 00:17 To: George Siaw; [EMAIL PROTECTED] Subject: RE: ISL Trunking from a h/w's perspective [7:39246] You dont have to configure SC0 interface to do isl or dot1q. Its only needed for management, telnet etc... Larry Letterman Cisco Systems [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of George Siaw Sent: Friday, March 22, 2002 3:45 PM To: [EMAIL PROTECTED] Subject: ISL Trunking from a h/w's perspective [7:39246] Guys, Any ideas as how I can configure isl trunking without an Sc0 port on the supervisor engines? Can I configure on of the ports to assume this position i.e. Sc0? If so what are the cmds? Regards, George. Configs as below: Console (enable) sh mod 1 Mod Module-Name Ports Module-Type ModelSerial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2 4.3(1a) Mod Sub-Type Sub-Model Sub-Serial Sub-Hw --- - -- -- 1 NFFC+WS-F5531 0012153640 1.0 Console (enable) sh mod Mod Module-Name Ports Module-Type ModelSerial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok 2 ENGINE-20 Supervisor IIIWS-X5530 010867093 standby 3 CCIE_LAB-0 2410/100BaseTX Ethernet WS-X5224 012154555 ok 4 CCIE_LAB-1 2410/100BaseTX Ethernet WS-X5224 009616952 ok 5 CCIE_LAB-2 2410/100BaseTX Ethernet WS-X5224 016372420 ok Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2 4.3(1a) 2 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 2.03.1.2 4.3(1a) 3 00-50-53-c4-42-08 to 00-50-53-c4-42-1f 1.43.1(1) 4.3(1a) 4 00-10-7b-83-36-d8 to 00-10-7b-83-36-ef 1.43.1(1) 4.3(1a) 5 00-30-b6-29-95-48 to 00-30-b6-29-95-5f 1.53.1(1) 4.3(1a) Mod Sub-Type Sub-Model Sub-Serial Sub-Hw --- - -- -- 1 NFFC+WS-F5531 0012153640 1.0 2 NFFC WS-F5521 0010866222 1.1 Console (enable) sh ver WS-C5505 Software, Version McpSW: 4.3(1a) NmpSW: 4.3(1a) Copyright (c) 1995-1998 by Cisco Systems NMP S/W compiled on Nov 23 1998, 15:22:34 MCP S/W compiled on Nov 23 1998, 15:19:30 System Bootstrap Version: 3.1.2 Hardware Version: 1.0 Model: WS-C5505 Serial #: 066526573 Mod Port Model Serial # Versions --- -- - 1 0WS-X5530 012144234 Hw : 3.0 Fw : 3.1.2 Fw1: 4.2(1) Sw : 4.3(1a) 2 0WS-X5530 010867093 Hw : 2.0 Fw : 3.1.2 Fw1: 4.2(1) Sw : 4.3(1a) 3 24 WS-X5224 012154555 Hw : 1.4 Fw : 3.1(1) Sw : 4.3(1a) 4 24 WS-X5224 009616952 Hw : 1.4 Fw : 3.1(1) Sw : 4.3(1a) 5 24 WS-X5224 016372420 Hw : 1.5 Fw : 3.1(1) Sw : 4.3(1a) DRAMFLASH NVRAM Module Total UsedFreeTotal UsedFreeTotal Used Free -- --- --- --- --- --- --- - - - 1 32640K 13381K 19259K 8192K 3984K 4208K 512K 116K 396K Uptime is 0 day, 0 hour, 13 minutes _ Do You Yahoo!? Get your free @yahoo.com address
RE: ISL Trunking from a h/w's perspective [7:39246]
Thanks for all your responses. One last question though. For external router, routing between vlans if I have just one FastEthernet interface on the router can I route between vlans? George. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Scott H. Sent: 23 March 2002 00:53 To: [EMAIL PROTECTED] Subject: Re: ISL Trunking from a h/w's perspective [7:39246] The only time the SC0 interface comes into play is for telnet into the box. If you have any 100 MB ports on your switch, you can run trunking. set trunk (mod/port) on isl If this trunk is running into a router, you need to create the subinterfaces on the router to enable routing between VLANS. int fa1/0.100 ip address (the subnet of the vlan) encap isl (the vlan #) HTH, Scott George Siaw wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Do I need an Sc0 port when routing between Vlans? However, there's no uplink module on neither of my supervisor engines. Would you know a s/w work around without having to buy the module? George. -Original Message- From: Larry Letterman [mailto:[EMAIL PROTECTED]] Sent: 23 March 2002 00:17 To: George Siaw; [EMAIL PROTECTED] Subject: RE: ISL Trunking from a h/w's perspective [7:39246] You dont have to configure SC0 interface to do isl or dot1q. Its only needed for management, telnet etc... Larry Letterman Cisco Systems [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of George Siaw Sent: Friday, March 22, 2002 3:45 PM To: [EMAIL PROTECTED] Subject: ISL Trunking from a h/w's perspective [7:39246] Guys, Any ideas as how I can configure isl trunking without an Sc0 port on the supervisor engines? Can I configure on of the ports to assume this position i.e. Sc0? If so what are the cmds? Regards, George. Configs as below: Console (enable) sh mod 1 Mod Module-Name Ports Module-Type Model Serial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2 4.3(1a) Mod Sub-Type Sub-Model Sub-Serial Sub-Hw --- - -- -- 1 NFFC+WS-F5531 0012153640 1.0 Console (enable) sh mod Mod Module-Name Ports Module-Type Model Serial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok 2 ENGINE-20 Supervisor IIIWS-X5530 010867093 standby 3 CCIE_LAB-0 2410/100BaseTX Ethernet WS-X5224 012154555 ok 4 CCIE_LAB-1 2410/100BaseTX Ethernet WS-X5224 009616952 ok 5 CCIE_LAB-2 2410/100BaseTX Ethernet WS-X5224 016372420 ok Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2 4.3(1a) 2 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 2.03.1.2 4.3(1a) 3 00-50-53-c4-42-08 to 00-50-53-c4-42-1f 1.43.1(1) 4.3(1a) 4 00-10-7b-83-36-d8 to 00-10-7b-83-36-ef 1.43.1(1) 4.3(1a) 5 00-30-b6-29-95-48 to 00-30-b6-29-95-5f 1.53.1(1) 4.3(1a) Mod Sub-Type Sub-Model Sub-Serial Sub-Hw --- - -- -- 1 NFFC+WS-F5531 0012153640 1.0 2 NFFC WS-F5521 0010866222 1.1 Console (enable) sh ver WS-C5505 Software, Version McpSW: 4.3(1a) NmpSW: 4.3(1a) Copyright (c) 1995-1998 by Cisco Systems NMP S/W compiled on Nov 23 1998, 15:22:34 MCP S/W compiled on Nov 23 1998, 15:19:30 System Bootstrap Version: 3.1.2 Hardware Version: 1.0 Model: WS-C5505 Serial #: 066526573 Mod Port Model Serial # Versions --- -- - 1 0WS-X5530 012144234 Hw : 3.0 Fw : 3.1.2 Fw1: 4.2(1) Sw : 4.3(1a) 2 0WS-X5530 010867093 Hw : 2.0 Fw : 3.1.2 Fw1: 4.2(1) Sw : 4.3(1a) 3 24 WS-X5224 012154555 Hw : 1.4 Fw : 3.1(1) Sw : 4.3(1a) 4 24 WS-X5224 009616952 Hw : 1.4 Fw : 3.1(1) Sw : 4.3(1a) 5 24 WS-X5224 016372420 Hw : 1.5 Fw : 3.1(1) Sw : 4.3(1a) DRAM
Re: ISL Trunking from a h/w's perspective [7:39246]
The router's ethernet must be 100 full dux. You configure subinterfaces on the ethernet. a trunking protocol must be configured on each sub with the corresponding vlan #. The router will route between Vlans. Hope this helps. Danny George Siaw wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Thanks for all your responses. One last question though. For external router, routing between vlans if I have just one FastEthernet interface on the router can I route between vlans? George. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Scott H. Sent: 23 March 2002 00:53 To: [EMAIL PROTECTED] Subject: Re: ISL Trunking from a h/w's perspective [7:39246] The only time the SC0 interface comes into play is for telnet into the box. If you have any 100 MB ports on your switch, you can run trunking. set trunk (mod/port) on isl If this trunk is running into a router, you need to create the subinterfaces on the router to enable routing between VLANS. int fa1/0.100 ip address (the subnet of the vlan) encap isl (the vlan #) HTH, Scott George Siaw wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Do I need an Sc0 port when routing between Vlans? However, there's no uplink module on neither of my supervisor engines. Would you know a s/w work around without having to buy the module? George. -Original Message- From: Larry Letterman [mailto:[EMAIL PROTECTED]] Sent: 23 March 2002 00:17 To: George Siaw; [EMAIL PROTECTED] Subject: RE: ISL Trunking from a h/w's perspective [7:39246] You dont have to configure SC0 interface to do isl or dot1q. Its only needed for management, telnet etc... Larry Letterman Cisco Systems [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of George Siaw Sent: Friday, March 22, 2002 3:45 PM To: [EMAIL PROTECTED] Subject: ISL Trunking from a h/w's perspective [7:39246] Guys, Any ideas as how I can configure isl trunking without an Sc0 port on the supervisor engines? Can I configure on of the ports to assume this position i.e. Sc0? If so what are the cmds? Regards, George. Configs as below: Console (enable) sh mod 1 Mod Module-Name Ports Module-Type Model Serial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2 4.3(1a) Mod Sub-Type Sub-Model Sub-Serial Sub-Hw --- - -- -- 1 NFFC+WS-F5531 0012153640 1.0 Console (enable) sh mod Mod Module-Name Ports Module-Type Model Serial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok 2 ENGINE-20 Supervisor IIIWS-X5530 010867093 standby 3 CCIE_LAB-0 2410/100BaseTX Ethernet WS-X5224 012154555 ok 4 CCIE_LAB-1 2410/100BaseTX Ethernet WS-X5224 009616952 ok 5 CCIE_LAB-2 2410/100BaseTX Ethernet WS-X5224 016372420 ok Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2 4.3(1a) 2 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 2.03.1.2 4.3(1a) 3 00-50-53-c4-42-08 to 00-50-53-c4-42-1f 1.43.1(1) 4.3(1a) 4 00-10-7b-83-36-d8 to 00-10-7b-83-36-ef 1.43.1(1) 4.3(1a) 5 00-30-b6-29-95-48 to 00-30-b6-29-95-5f 1.53.1(1) 4.3(1a) Mod Sub-Type Sub-Model Sub-Serial Sub-Hw --- - -- -- 1 NFFC+WS-F5531 0012153640 1.0 2 NFFC WS-F5521 0010866222 1.1 Console (enable) sh ver WS-C5505 Software, Version McpSW: 4.3(1a) NmpSW: 4.3(1a) Copyright (c) 1995-1998 by Cisco Systems NMP S/W compiled on Nov 23 1998, 15:22:34 MCP S/W compiled on Nov 23 1998, 15:19:30 System Bootstrap Version: 3.1.2 Hardware Version: 1.0 Model: WS-C5505 Serial #: 066526573 Mod Port Model Serial # Versions --- -- - 1 0WS-X5530 012144234 Hw : 3.0 Fw : 3.1.2 Fw1: 4.2(1) Sw : 4.3(1a) 2 0WS-X5530 010867093 Hw : 2.0
RE: ISL Trunking from a h/w's perspective [7:39246]
Yes, you need to set up the ethernet for 2 sub-interfaces and set the encapsulation to isl and the isl id # to the vlan # you set up on the switch. if the router config is correct the router will route the vlans across the sub-interfaces on the router. Larry Letterman Cisco Systems [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of George Siaw Sent: Friday, March 22, 2002 5:20 PM To: [EMAIL PROTECTED] Subject: RE: ISL Trunking from a h/w's perspective [7:39246] Thanks for all your responses. One last question though. For external router, routing between vlans if I have just one FastEthernet interface on the router can I route between vlans? George. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Scott H. Sent: 23 March 2002 00:53 To: [EMAIL PROTECTED] Subject: Re: ISL Trunking from a h/w's perspective [7:39246] The only time the SC0 interface comes into play is for telnet into the box. If you have any 100 MB ports on your switch, you can run trunking. set trunk (mod/port) on isl If this trunk is running into a router, you need to create the subinterfaces on the router to enable routing between VLANS. int fa1/0.100 ip address (the subnet of the vlan) encap isl (the vlan #) HTH, Scott George Siaw wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Do I need an Sc0 port when routing between Vlans? However, there's no uplink module on neither of my supervisor engines. Would you know a s/w work around without having to buy the module? George. -Original Message- From: Larry Letterman [mailto:[EMAIL PROTECTED]] Sent: 23 March 2002 00:17 To: George Siaw; [EMAIL PROTECTED] Subject: RE: ISL Trunking from a h/w's perspective [7:39246] You dont have to configure SC0 interface to do isl or dot1q. Its only needed for management, telnet etc... Larry Letterman Cisco Systems [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of George Siaw Sent: Friday, March 22, 2002 3:45 PM To: [EMAIL PROTECTED] Subject: ISL Trunking from a h/w's perspective [7:39246] Guys, Any ideas as how I can configure isl trunking without an Sc0 port on the supervisor engines? Can I configure on of the ports to assume this position i.e. Sc0? If so what are the cmds? Regards, George. Configs as below: Console (enable) sh mod 1 Mod Module-Name Ports Module-Type Model Serial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2 4.3(1a) Mod Sub-Type Sub-Model Sub-Serial Sub-Hw --- - -- -- 1 NFFC+WS-F5531 0012153640 1.0 Console (enable) sh mod Mod Module-Name Ports Module-Type Model Serial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok 2 ENGINE-20 Supervisor IIIWS-X5530 010867093 standby 3 CCIE_LAB-0 2410/100BaseTX Ethernet WS-X5224 012154555 ok 4 CCIE_LAB-1 2410/100BaseTX Ethernet WS-X5224 009616952 ok 5 CCIE_LAB-2 2410/100BaseTX Ethernet WS-X5224 016372420 ok Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2 4.3(1a) 2 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 2.03.1.2 4.3(1a) 3 00-50-53-c4-42-08 to 00-50-53-c4-42-1f 1.43.1(1) 4.3(1a) 4 00-10-7b-83-36-d8 to 00-10-7b-83-36-ef 1.43.1(1) 4.3(1a) 5 00-30-b6-29-95-48 to 00-30-b6-29-95-5f 1.53.1(1) 4.3(1a) Mod Sub-Type Sub-Model Sub-Serial Sub-Hw --- - -- -- 1 NFFC+WS-F5531 0012153640 1.0 2 NFFC WS-F5521 0010866222 1.1 Console (enable) sh ver WS-C5505 Software, Version McpSW: 4.3(1a) NmpSW: 4.3(1a) Copyright (c) 1995-1998 by Cisco Systems NMP S/W compiled on Nov 23 1998, 15:22:34 MCP S/W compiled on Nov 23 1998, 15:19:30 System Bootstrap Version: 3.1.2 Hardware Version: 1.0 Model: WS-C5505 Serial #: 066526573 Mod Port Model Serial # Versions --- -- - 1 0WS-X5530 012144234 Hw : 3.0 Fw : 3.1.2 Fw1: 4.2(1) Sw : 4.3(1a) 2 0WS-X5530 010867093 Hw : 2.0 Fw
Re: ISL Trunking from a h/w's perspective [7:39246]
Actually on some platforms with the right IOS you can trunk 10 meg ports: C3660B(config)#inter e2/0.1 C3660B(config-subif)#encap dot1 1 C3660B(config-subif)# Dave danny wrote: The router's ethernet must be 100 full dux. You configure subinterfaces on the ethernet. a trunking protocol must be configured on each sub with the corresponding vlan #. The router will route between Vlans. Hope this helps. Danny George Siaw wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Thanks for all your responses. One last question though. For external router, routing between vlans if I have just one FastEthernet interface on the router can I route between vlans? George. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Scott H. Sent: 23 March 2002 00:53 To: [EMAIL PROTECTED] Subject: Re: ISL Trunking from a h/w's perspective [7:39246] The only time the SC0 interface comes into play is for telnet into the box. If you have any 100 MB ports on your switch, you can run trunking. set trunk (mod/port) on isl If this trunk is running into a router, you need to create the subinterfaces on the router to enable routing between VLANS. int fa1/0.100 ip address (the subnet of the vlan) encap isl (the vlan #) HTH, Scott George Siaw wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Do I need an Sc0 port when routing between Vlans? However, there's no uplink module on neither of my supervisor engines. Would you know a s/w work around without having to buy the module? George. -Original Message- From: Larry Letterman [mailto:[EMAIL PROTECTED]] Sent: 23 March 2002 00:17 To: George Siaw; [EMAIL PROTECTED] Subject: RE: ISL Trunking from a h/w's perspective [7:39246] You dont have to configure SC0 interface to do isl or dot1q. Its only needed for management, telnet etc... Larry Letterman Cisco Systems [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of George Siaw Sent: Friday, March 22, 2002 3:45 PM To: [EMAIL PROTECTED] Subject: ISL Trunking from a h/w's perspective [7:39246] Guys, Any ideas as how I can configure isl trunking without an Sc0 port on the supervisor engines? Can I configure on of the ports to assume this position i.e. Sc0? If so what are the cmds? Regards, George. Configs as below: Console (enable) sh mod 1 Mod Module-Name Ports Module-Type Model Serial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2 4.3(1a) Mod Sub-Type Sub-Model Sub-Serial Sub-Hw --- - -- -- 1 NFFC+WS-F5531 0012153640 1.0 Console (enable) sh mod Mod Module-Name Ports Module-Type Model Serial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok 2 ENGINE-20 Supervisor IIIWS-X5530 010867093 standby 3 CCIE_LAB-0 2410/100BaseTX Ethernet WS-X5224 012154555 ok 4 CCIE_LAB-1 2410/100BaseTX Ethernet WS-X5224 009616952 ok 5 CCIE_LAB-2 2410/100BaseTX Ethernet WS-X5224 016372420 ok Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2 4.3(1a) 2 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 2.03.1.2 4.3(1a) 3 00-50-53-c4-42-08 to 00-50-53-c4-42-1f 1.43.1(1) 4.3(1a) 4 00-10-7b-83-36-d8 to 00-10-7b-83-36-ef 1.43.1(1) 4.3(1a) 5 00-30-b6-29-95-48 to 00-30-b6-29-95-5f 1.53.1(1) 4.3(1a) Mod Sub-Type Sub-Model Sub-Serial Sub-Hw --- - -- -- 1 NFFC+WS-F5531 0012153640 1.0 2 NFFC WS-F5521 0010866222 1.1 Console (enable) sh ver WS-C5505 Software, Version McpSW: 4.3(1a) NmpSW: 4.3(1a) Copyright (c) 1995-1998 by Cisco Systems NMP S/W compiled on Nov 23 1998, 15:22:34 MCP S/W compiled on Nov 23 1998, 15:19:30 System Bootstrap Version: 3.1.2 Hardware Version: 1.0 Model: WS-C5505 Serial #: 066526573
Re: ISL Trunking from a h/w's perspective [7:39246]
no you can't. I got straight from cisco that they have to be 100 meg full-dux interfaces. MADMAN wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Actually on some platforms with the right IOS you can trunk 10 meg ports: C3660B(config)#inter e2/0.1 C3660B(config-subif)#encap dot1 1 C3660B(config-subif)# Dave danny wrote: The router's ethernet must be 100 full dux. You configure subinterfaces on the ethernet. a trunking protocol must be configured on each sub with the corresponding vlan #. The router will route between Vlans. Hope this helps. Danny George Siaw wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Thanks for all your responses. One last question though. For external router, routing between vlans if I have just one FastEthernet interface on the router can I route between vlans? George. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Scott H. Sent: 23 March 2002 00:53 To: [EMAIL PROTECTED] Subject: Re: ISL Trunking from a h/w's perspective [7:39246] The only time the SC0 interface comes into play is for telnet into the box. If you have any 100 MB ports on your switch, you can run trunking. set trunk (mod/port) on isl If this trunk is running into a router, you need to create the subinterfaces on the router to enable routing between VLANS. int fa1/0.100 ip address (the subnet of the vlan) encap isl (the vlan #) HTH, Scott George Siaw wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Do I need an Sc0 port when routing between Vlans? However, there's no uplink module on neither of my supervisor engines. Would you know a s/w work around without having to buy the module? George. -Original Message- From: Larry Letterman [mailto:[EMAIL PROTECTED]] Sent: 23 March 2002 00:17 To: George Siaw; [EMAIL PROTECTED] Subject: RE: ISL Trunking from a h/w's perspective [7:39246] You dont have to configure SC0 interface to do isl or dot1q. Its only needed for management, telnet etc... Larry Letterman Cisco Systems [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of George Siaw Sent: Friday, March 22, 2002 3:45 PM To: [EMAIL PROTECTED] Subject: ISL Trunking from a h/w's perspective [7:39246] Guys, Any ideas as how I can configure isl trunking without an Sc0 port on the supervisor engines? Can I configure on of the ports to assume this position i.e. Sc0? If so what are the cmds? Regards, George. Configs as below: Console (enable) sh mod 1 Mod Module-Name Ports Module-Type Model Serial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2 4.3(1a) Mod Sub-Type Sub-Model Sub-Serial Sub-Hw --- - -- -- 1 NFFC+WS-F5531 0012153640 1.0 Console (enable) sh mod Mod Module-Name Ports Module-Type Model Serial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok 2 ENGINE-20 Supervisor IIIWS-X5530 010867093 standby 3 CCIE_LAB-0 2410/100BaseTX Ethernet WS-X5224 012154555 ok 4 CCIE_LAB-1 2410/100BaseTX Ethernet WS-X5224 009616952 ok 5 CCIE_LAB-2 2410/100BaseTX Ethernet WS-X5224 016372420 ok Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2 4.3(1a) 2 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 2.03.1.2 4.3(1a) 3 00-50-53-c4-42-08 to 00-50-53-c4-42-1f 1.43.1(1) 4.3(1a) 4 00-10-7b-83-36-d8 to 00-10-7b-83-36-ef 1.43.1(1) 4.3(1a) 5 00-30-b6-29-95-48 to 00-30-b6-29-95-5f 1.53.1(1) 4.3(1a) Mod Sub-Type Sub-Model Sub-Serial Sub-Hw --- - -- -- 1 NFFC+WS-F5531 0012153640 1.0 2 NFFC WS-F5521 0010866222 1.1
Re: ISL Trunking from a h/w's perspective [7:39246]
you got straight from cisco?? a router or cco??
straight from cisco--a router--you can do dot1q on 10BT interfaces--from my
lab 2611:
interface Ethernet0/1
description D/R subnets (10.10.0.0/16)
no ip address
full-duplex
!
interface Ethernet0/1.1
encapsulation dot1Q 1
ip address 10.10.254.1 255.255.255.0
!
interface Ethernet0/1.7
encapsulation dot1Q 7
ip address 10.10.7.1 255.255.255.0
!
interface Ethernet0/1.10
encapsulation dot1Q 10
ip address 10.10.10.1 255.255.255.0
!
interface Ethernet0/1.13
encapsulation dot1Q 13
ip address 10.10.13.1 255.255.255.0
!
interface Ethernet0/1.18
encapsulation dot1Q 18
ip address 10.10.18.1 255.255.255.0
Danny Andaluz, CCNP wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
no you can't. I got straight from cisco that they have to be 100 meg
full-dux interfaces.
MADMAN wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
Actually on some platforms with the right IOS you can trunk 10 meg
ports:
C3660B(config)#inter e2/0.1
C3660B(config-subif)#encap dot1 1
C3660B(config-subif)#
Dave
danny wrote:
The router's ethernet must be 100 full dux. You configure
subinterfaces
on
the ethernet. a trunking protocol must be configured on each sub with
the
corresponding vlan #. The router will route between Vlans.
Hope this helps.
Danny
George Siaw wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
Thanks for all your responses.
One last question though. For external router, routing between vlans
if
I have just one FastEthernet interface on the router can I route
between
vlans?
George.
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf
Of
Scott H.
Sent: 23 March 2002 00:53
To: [EMAIL PROTECTED]
Subject: Re: ISL Trunking from a h/w's perspective [7:39246]
The only time the SC0 interface comes into play is for telnet into
the
box.
If you have any 100 MB ports on your switch, you can run trunking.
set trunk (mod/port) on isl
If this trunk is running into a router, you need to create the
subinterfaces
on the router to enable routing between VLANS.
int fa1/0.100
ip address (the subnet of the vlan)
encap isl (the vlan #)
HTH,
Scott
George Siaw wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
Do I need an Sc0 port when routing between Vlans? However, there's
no
uplink module on neither of my supervisor engines. Would you know
a
s/w
work around without having to buy the module?
George.
-Original Message-
From: Larry Letterman [mailto:[EMAIL PROTECTED]]
Sent: 23 March 2002 00:17
To: George Siaw; [EMAIL PROTECTED]
Subject: RE: ISL Trunking from a h/w's perspective [7:39246]
You dont have to configure SC0 interface to do isl or dot1q. Its
only
needed
for management, telnet etc...
Larry Letterman
Cisco Systems
[EMAIL PROTECTED]
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On
Behalf
Of
George Siaw
Sent: Friday, March 22, 2002 3:45 PM
To: [EMAIL PROTECTED]
Subject: ISL Trunking from a h/w's perspective [7:39246]
Guys,
Any ideas as how I can configure isl trunking without an Sc0 port
on
the
supervisor engines? Can I configure on of the ports to assume this
position i.e. Sc0? If so what are the cmds?
Regards,
George.
Configs as below:
Console (enable) sh mod 1
Mod Module-Name Ports Module-Type Model
Serial-Num
Status
--- --- - - -
-
---
1 ENGINE-10 Supervisor IIIWS-X5530
012144234
ok
Mod MAC-Address(es)Hw Fw Sw
--- -- -- --
-
1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2
4.3(1a)
Mod Sub-Type Sub-Model Sub-Serial Sub-Hw
--- - -- --
1 NFFC+WS-F5531 0012153640 1.0
Console (enable) sh mod
Mod Module-Name Ports Module-Type Model
Serial-Num
Status
--- --- - - -
-
---
1 ENGINE-10 Supervisor IIIWS-X5530
012144234
ok
2 ENGINE-20 Supervisor IIIWS-X5530
010867093
standby
3 CCIE_LAB-0 2410/100BaseTX Ethernet WS-X5224
012154555
ok
Re: ISL Trunking from a h/w's perspective [7:39246]
I don't know what else you want me to do to prove it. This was true at one time but it has changed. I have personally not tried this config and seen it work but if I have some time on Monday I'll confirm whether or not the 3660 will do as advertised. Dave Danny Andaluz, CCNP wrote: no you can't. I got straight from cisco that they have to be 100 meg full-dux interfaces. MADMAN wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Actually on some platforms with the right IOS you can trunk 10 meg ports: C3660B(config)#inter e2/0.1 C3660B(config-subif)#encap dot1 1 C3660B(config-subif)# Dave danny wrote: The router's ethernet must be 100 full dux. You configure subinterfaces on the ethernet. a trunking protocol must be configured on each sub with the corresponding vlan #. The router will route between Vlans. Hope this helps. Danny George Siaw wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Thanks for all your responses. One last question though. For external router, routing between vlans if I have just one FastEthernet interface on the router can I route between vlans? George. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Scott H. Sent: 23 March 2002 00:53 To: [EMAIL PROTECTED] Subject: Re: ISL Trunking from a h/w's perspective [7:39246] The only time the SC0 interface comes into play is for telnet into the box. If you have any 100 MB ports on your switch, you can run trunking. set trunk (mod/port) on isl If this trunk is running into a router, you need to create the subinterfaces on the router to enable routing between VLANS. int fa1/0.100 ip address (the subnet of the vlan) encap isl (the vlan #) HTH, Scott George Siaw wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Do I need an Sc0 port when routing between Vlans? However, there's no uplink module on neither of my supervisor engines. Would you know a s/w work around without having to buy the module? George. -Original Message- From: Larry Letterman [mailto:[EMAIL PROTECTED]] Sent: 23 March 2002 00:17 To: George Siaw; [EMAIL PROTECTED] Subject: RE: ISL Trunking from a h/w's perspective [7:39246] You dont have to configure SC0 interface to do isl or dot1q. Its only needed for management, telnet etc... Larry Letterman Cisco Systems [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of George Siaw Sent: Friday, March 22, 2002 3:45 PM To: [EMAIL PROTECTED] Subject: ISL Trunking from a h/w's perspective [7:39246] Guys, Any ideas as how I can configure isl trunking without an Sc0 port on the supervisor engines? Can I configure on of the ports to assume this position i.e. Sc0? If so what are the cmds? Regards, George. Configs as below: Console (enable) sh mod 1 Mod Module-Name Ports Module-Type Model Serial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2 4.3(1a) Mod Sub-Type Sub-Model Sub-Serial Sub-Hw --- - -- -- 1 NFFC+WS-F5531 0012153640 1.0 Console (enable) sh mod Mod Module-Name Ports Module-Type Model Serial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok 2 ENGINE-20 Supervisor IIIWS-X5530 010867093 standby 3 CCIE_LAB-0 2410/100BaseTX Ethernet WS-X5224 012154555 ok 4 CCIE_LAB-1 2410/100BaseTX Ethernet WS-X5224 009616952 ok 5 CCIE_LAB-2 2410/100BaseTX Ethernet WS-X5224 016372420 ok Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2 4.3(1a) 2 00-50-f0-0c-64-00
Re: ISL Trunking from a h/w's perspective [7:39246]
Obviously I was misinformed. you learn something new everyday!! Next time I won't speak so fast!! Thanks Wow wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... you got straight from cisco?? a router or cco?? straight from cisco--a router--you can do dot1q on 10BT interfaces--from my lab 2611: interface Ethernet0/1 description D/R subnets (10.10.0.0/16) no ip address full-duplex ! interface Ethernet0/1.1 encapsulation dot1Q 1 ip address 10.10.254.1 255.255.255.0 ! interface Ethernet0/1.7 encapsulation dot1Q 7 ip address 10.10.7.1 255.255.255.0 ! interface Ethernet0/1.10 encapsulation dot1Q 10 ip address 10.10.10.1 255.255.255.0 ! interface Ethernet0/1.13 encapsulation dot1Q 13 ip address 10.10.13.1 255.255.255.0 ! interface Ethernet0/1.18 encapsulation dot1Q 18 ip address 10.10.18.1 255.255.255.0 Danny Andaluz, CCNP wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... no you can't. I got straight from cisco that they have to be 100 meg full-dux interfaces. MADMAN wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Actually on some platforms with the right IOS you can trunk 10 meg ports: C3660B(config)#inter e2/0.1 C3660B(config-subif)#encap dot1 1 C3660B(config-subif)# Dave danny wrote: The router's ethernet must be 100 full dux. You configure subinterfaces on the ethernet. a trunking protocol must be configured on each sub with the corresponding vlan #. The router will route between Vlans. Hope this helps. Danny George Siaw wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Thanks for all your responses. One last question though. For external router, routing between vlans if I have just one FastEthernet interface on the router can I route between vlans? George. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Scott H. Sent: 23 March 2002 00:53 To: [EMAIL PROTECTED] Subject: Re: ISL Trunking from a h/w's perspective [7:39246] The only time the SC0 interface comes into play is for telnet into the box. If you have any 100 MB ports on your switch, you can run trunking. set trunk (mod/port) on isl If this trunk is running into a router, you need to create the subinterfaces on the router to enable routing between VLANS. int fa1/0.100 ip address (the subnet of the vlan) encap isl (the vlan #) HTH, Scott George Siaw wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Do I need an Sc0 port when routing between Vlans? However, there's no uplink module on neither of my supervisor engines. Would you know a s/w work around without having to buy the module? George. -Original Message- From: Larry Letterman [mailto:[EMAIL PROTECTED]] Sent: 23 March 2002 00:17 To: George Siaw; [EMAIL PROTECTED] Subject: RE: ISL Trunking from a h/w's perspective [7:39246] You dont have to configure SC0 interface to do isl or dot1q. Its only needed for management, telnet etc... Larry Letterman Cisco Systems [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of George Siaw Sent: Friday, March 22, 2002 3:45 PM To: [EMAIL PROTECTED] Subject: ISL Trunking from a h/w's perspective [7:39246] Guys, Any ideas as how I can configure isl trunking without an Sc0 port on the supervisor engines? Can I configure on of the ports to assume this position i.e. Sc0? If so what are the cmds? Regards, George. Configs as below: Console (enable) sh mod 1 Mod Module-Name Ports Module-Type Model Serial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2 4.3(1a) Mod Sub-Type Sub-Model Sub-Serial Sub-Hw --- - -- -- 1 NFFC+WS-F5531 0012153640 1.0 Console (enable) sh mod Mod Module-Name Ports Module-Type
RE: ISL Trunking from a h/w's perspective [7:39246]
Danny, Sometimes even people who work for Cisco, even SE's who may by CCIE's, make mistakes. The router never lies: 3620(config)#int ethernet 0/0.1 3620(config-subif)#encap ? dot1Q IEEE 802.1Q Virtual LAN sdeIEEE 802.10 Virtual LAN - Secure Data Exchange Notice this is an Ethernet, not FastEthernet, and that it does indeed allow 802.1q trunking. ISL, on the other hand, does require FastEthernet. So maybe that is where the confusion lies. Regards, Kent -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Danny Andaluz, CCNP Sent: Friday, March 22, 2002 7:25 PM To: [EMAIL PROTECTED] Subject: Re: ISL Trunking from a h/w's perspective [7:39246] no you can't. I got straight from cisco that they have to be 100 meg full-dux interfaces. MADMAN wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Actually on some platforms with the right IOS you can trunk 10 meg ports: C3660B(config)#inter e2/0.1 C3660B(config-subif)#encap dot1 1 C3660B(config-subif)# Dave danny wrote: The router's ethernet must be 100 full dux. You configure subinterfaces on the ethernet. a trunking protocol must be configured on each sub with the corresponding vlan #. The router will route between Vlans. Hope this helps. Danny George Siaw wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Thanks for all your responses. One last question though. For external router, routing between vlans if I have just one FastEthernet interface on the router can I route between vlans? George. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Scott H. Sent: 23 March 2002 00:53 To: [EMAIL PROTECTED] Subject: Re: ISL Trunking from a h/w's perspective [7:39246] The only time the SC0 interface comes into play is for telnet into the box. If you have any 100 MB ports on your switch, you can run trunking. set trunk (mod/port) on isl If this trunk is running into a router, you need to create the subinterfaces on the router to enable routing between VLANS. int fa1/0.100 ip address (the subnet of the vlan) encap isl (the vlan #) HTH, Scott George Siaw wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Do I need an Sc0 port when routing between Vlans? However, there's no uplink module on neither of my supervisor engines. Would you know a s/w work around without having to buy the module? George. -Original Message- From: Larry Letterman [mailto:[EMAIL PROTECTED]] Sent: 23 March 2002 00:17 To: George Siaw; [EMAIL PROTECTED] Subject: RE: ISL Trunking from a h/w's perspective [7:39246] You dont have to configure SC0 interface to do isl or dot1q. Its only needed for management, telnet etc... Larry Letterman Cisco Systems [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of George Siaw Sent: Friday, March 22, 2002 3:45 PM To: [EMAIL PROTECTED] Subject: ISL Trunking from a h/w's perspective [7:39246] Guys, Any ideas as how I can configure isl trunking without an Sc0 port on the supervisor engines? Can I configure on of the ports to assume this position i.e. Sc0? If so what are the cmds? Regards, George. Configs as below: Console (enable) sh mod 1 Mod Module-Name Ports Module-Type Model Serial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2 4.3(1a) Mod Sub-Type Sub-Model Sub-Serial Sub-Hw --- - -- -- 1 NFFC+WS-F5531 0012153640 1.0 Console (enable) sh mod Mod Module-Name Ports Module-Type Model Serial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok 2 ENGINE-20 Supervisor IIIWS-X5530 010867093 standby 3 CCIE_LAB-0 2410/100BaseTX Ethernet WS-X5224 012154555 ok 4 CCIE_LAB-1 2410/100BaseTX Ethernet WS-X5224 009616952 ok 5 CCIE_LAB-2 2410/100BaseTX Ethernet WS-X5224 016372420 ok Mod MAC-Address(es)
RE: ISL Trunking from a h/w's perspective [7:39246]
Yes, you can. You can setup 802.1q trunks on a 10mb interface just as Dave described. The information you received from Cisco pertains to ISL trunks, which require a 100mb interface. Sean -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Danny Andaluz, CCNP Sent: Friday, March 22, 2002 7:25 PM To: [EMAIL PROTECTED] Subject: Re: ISL Trunking from a h/w's perspective [7:39246] no you can't. I got straight from cisco that they have to be 100 meg full-dux interfaces. MADMAN wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Actually on some platforms with the right IOS you can trunk 10 meg ports: C3660B(config)#inter e2/0.1 C3660B(config-subif)#encap dot1 1 C3660B(config-subif)# Dave danny wrote: The router's ethernet must be 100 full dux. You configure subinterfaces on the ethernet. a trunking protocol must be configured on each sub with the corresponding vlan #. The router will route between Vlans. Hope this helps. Danny George Siaw wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Thanks for all your responses. One last question though. For external router, routing between vlans if I have just one FastEthernet interface on the router can I route between vlans? George. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Scott H. Sent: 23 March 2002 00:53 To: [EMAIL PROTECTED] Subject: Re: ISL Trunking from a h/w's perspective [7:39246] The only time the SC0 interface comes into play is for telnet into the box. If you have any 100 MB ports on your switch, you can run trunking. set trunk (mod/port) on isl If this trunk is running into a router, you need to create the subinterfaces on the router to enable routing between VLANS. int fa1/0.100 ip address (the subnet of the vlan) encap isl (the vlan #) HTH, Scott George Siaw wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Do I need an Sc0 port when routing between Vlans? However, there's no uplink module on neither of my supervisor engines. Would you know a s/w work around without having to buy the module? George. -Original Message- From: Larry Letterman [mailto:[EMAIL PROTECTED]] Sent: 23 March 2002 00:17 To: George Siaw; [EMAIL PROTECTED] Subject: RE: ISL Trunking from a h/w's perspective [7:39246] You dont have to configure SC0 interface to do isl or dot1q. Its only needed for management, telnet etc... Larry Letterman Cisco Systems [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of George Siaw Sent: Friday, March 22, 2002 3:45 PM To: [EMAIL PROTECTED] Subject: ISL Trunking from a h/w's perspective [7:39246] Guys, Any ideas as how I can configure isl trunking without an Sc0 port on the supervisor engines? Can I configure on of the ports to assume this position i.e. Sc0? If so what are the cmds? Regards, George. Configs as below: Console (enable) sh mod 1 Mod Module-Name Ports Module-Type Model Serial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2 4.3(1a) Mod Sub-Type Sub-Model Sub-Serial Sub-Hw --- - -- -- 1 NFFC+WS-F5531 0012153640 1.0 Console (enable) sh mod Mod Module-Name Ports Module-Type Model Serial-Num Status --- --- - - - - --- 1 ENGINE-10 Supervisor IIIWS-X5530 012144234 ok 2 ENGINE-20 Supervisor IIIWS-X5530 010867093 standby 3 CCIE_LAB-0 2410/100BaseTX Ethernet WS-X5224 012154555 ok 4 CCIE_LAB-1 2410/100BaseTX Ethernet WS-X5224 009616952 ok 5 CCIE_LAB-2 2410/100BaseTX Ethernet WS-X5224 016372420 ok Mod MAC-Address(es)Hw Fw Sw --- -- -- -- - 1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2 4.3(1a) 2 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 2.03.1.2 4.3(1a) 3 00
Re: ISL Trunking from a h/w's perspective [7:39246]
Yeah. I think that's where I got confused. My bad. ISL does require 100
full.
Sean Knox wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
Yes, you can. You can setup 802.1q trunks on a 10mb interface just as Dave
described. The information you received from Cisco pertains to ISL trunks,
which require a 100mb interface.
Sean
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Danny Andaluz, CCNP
Sent: Friday, March 22, 2002 7:25 PM
To: [EMAIL PROTECTED]
Subject: Re: ISL Trunking from a h/w's perspective [7:39246]
no you can't. I got straight from cisco that they have to be 100 meg
full-dux interfaces.
MADMAN wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
Actually on some platforms with the right IOS you can trunk 10 meg
ports:
C3660B(config)#inter e2/0.1
C3660B(config-subif)#encap dot1 1
C3660B(config-subif)#
Dave
danny wrote:
The router's ethernet must be 100 full dux. You configure
subinterfaces
on
the ethernet. a trunking protocol must be configured on each sub with
the
corresponding vlan #. The router will route between Vlans.
Hope this helps.
Danny
George Siaw wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
Thanks for all your responses.
One last question though. For external router, routing between vlans
if
I have just one FastEthernet interface on the router can I route
between
vlans?
George.
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf
Of
Scott H.
Sent: 23 March 2002 00:53
To: [EMAIL PROTECTED]
Subject: Re: ISL Trunking from a h/w's perspective [7:39246]
The only time the SC0 interface comes into play is for telnet into
the
box.
If you have any 100 MB ports on your switch, you can run trunking.
set trunk (mod/port) on isl
If this trunk is running into a router, you need to create the
subinterfaces
on the router to enable routing between VLANS.
int fa1/0.100
ip address (the subnet of the vlan)
encap isl (the vlan #)
HTH,
Scott
George Siaw wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
Do I need an Sc0 port when routing between Vlans? However, there's
no
uplink module on neither of my supervisor engines. Would you know
a
s/w
work around without having to buy the module?
George.
-Original Message-
From: Larry Letterman [mailto:[EMAIL PROTECTED]]
Sent: 23 March 2002 00:17
To: George Siaw; [EMAIL PROTECTED]
Subject: RE: ISL Trunking from a h/w's perspective [7:39246]
You dont have to configure SC0 interface to do isl or dot1q. Its
only
needed
for management, telnet etc...
Larry Letterman
Cisco Systems
[EMAIL PROTECTED]
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On
Behalf
Of
George Siaw
Sent: Friday, March 22, 2002 3:45 PM
To: [EMAIL PROTECTED]
Subject: ISL Trunking from a h/w's perspective [7:39246]
Guys,
Any ideas as how I can configure isl trunking without an Sc0 port
on
the
supervisor engines? Can I configure on of the ports to assume this
position i.e. Sc0? If so what are the cmds?
Regards,
George.
Configs as below:
Console (enable) sh mod 1
Mod Module-Name Ports Module-Type Model
Serial-Num
Status
--- --- - - -
-
---
1 ENGINE-10 Supervisor IIIWS-X5530
012144234
ok
Mod MAC-Address(es)Hw Fw Sw
--- -- -- --
-
1 00-50-f0-0c-64-00 to 00-50-f0-0c-67-ff 3.03.1.2
4.3(1a)
Mod Sub-Type Sub-Model Sub-Serial Sub-Hw
--- - -- --
1 NFFC+WS-F5531 0012153640 1.0
Console (enable) sh mod
Mod Module-Name Ports Module-Type Model
Serial-Num
Status
--- --- - - -
-
---
1 ENGINE-10 Supervisor IIIWS-X5530
012144234
ok
2 ENGINE-20 Supervisor IIIWS-X5530
010867093
standby
3 CCIE_LAB-0 2410/100BaseTX Ethernet WS-X5224
012154555
ok
4 CCIE_LAB-1 2410/100BaseTX Ethernet WS-X5224
009616952
ok
5 CCIE_LAB-2 2410/100BaseTX Ethernet WS-X5224
016372420
In Need of H/W [7:35206]
Hi all, Anyone know where i can source for second hand routers/switches, el cheapo, in Malaysia/Singapore region? Do give me your contacts, if you're around here or ship to this region. Am looking to set up a CCNP/IE lab. thanks. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=35206t=35206 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Video over Frame Relay with H.323 compliant device [7:24241]
I'm putting together a frame-relay network with 2 PVC's. One PVC for data and the other for Video. I'll be using 1720 routers. I know prioritization must be used depending on UDP port. Does anyone have a sample config or any other resources that might be helpful? Thanks. __ Your favorite stores, helpful shopping tools and great gift ideas. Experience the convenience of buying online with Shop@Netscape! http://shopnow.netscape.com/ Get your own FREE, personal Netscape Mail account today at http://webmail.netscape.com/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=24241t=24241 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Video over Frame Relay with H.323 compliant device [7:24283]
I know policy-based routing needs to be enforced. Setting the IP precedence in the TOS field to 4. This would be compared to an access-list and if there is a match, it would go down one PVC. Does anyone have any other suggestions? jd -Original Message- From: JBILLABONG25 [mailto:[EMAIL PROTECTED]] Sent: Friday, October 26, 2001 8:51 AM To: cisco Subject: Video over Frame Relay with H.323 compliant device [7:24241] I'm putting together a frame-relay network with 2 PVC's. One PVC for data and the other for Video. I'll be using 1720 routers. I know prioritization must be used depending on UDP port. Does anyone have a sample config or any other resources that might be helpful? Thanks. __ Your favorite stores, helpful shopping tools and great gift ideas. Experience the convenience of buying online with Shop@Netscape! http://shopnow.netscape.com/ Get your own FREE, personal Netscape Mail account today at http://webmail.netscape.com/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=24283t=24283 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: TCP H.225 [7:21519]
According to the well-known port list http://www.iana.org/assignments/port-numbers it is: h323hostcall 1720/TCP h323hostcall h323hostcall 1720/up h323hostcall Heather -Original Message- From: Matthew Webster [SMTP:[EMAIL PROTECTED]] Sent: Sunday, September 30, 2001 5:37 PM To: [EMAIL PROTECTED] Subject: TCP H.225 [7:21519] Hi all, I am a recent CCNA graduate, and am about to tackle the challenges of the CCNP Routing 2.0 exam. Look forward to asking/providing help where possible! Anyway, I have a question - does anyone know the ITU spec, or RFC that deals with TCP ports for H.225 RAS messages. I know that port 1719 is used for ARQ's and ARC's, but am not sure what port 1720 is used for...here is part of the Etherpeek trace: TCP - Transport Control Protocol Source Port: 64642 Destination Port: 1720 RAS Transport Layer Service Access Point can anyone help? cheers, Matthew. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=21687t=21519 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: TCP H.225 [7:21519]
Matthew here's a little info on the ports used in h323: To set up a voice connection, the initiator starts a H.225 connection over TCP to the destination entity (normally the gatekeeper) at port number 1720. In this session a port number for the following H.245 connection is exchanged. The initiator opens in the next step a H.245 connection to the gatekeeper over TCP (ephemeral port), in which ports for the actual voice traffic between two H.323 terminals are exchanged. While the H.225 connection could be torn down after the H.245 ports have been exchanged, it will in practice stay up until the call is over. The gatekeeper itself will also open connections to the terminating H.323 terminal in order to be able to negotiate the ports that should be used between the initiating and the terminating H.323 terminal. Other TCP ports used for RAS services are 1718 (H.323 gatekeeper discovery) and 1719 (H.323 gatekeeper registration and status). regards Pat Matthew Webster wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi all, I am a recent CCNA graduate, and am about to tackle the challenges of the CCNP Routing 2.0 exam. Look forward to asking/providing help where possible! Anyway, I have a question - does anyone know the ITU spec, or RFC that deals with TCP ports for H.225 RAS messages. I know that port 1719 is used for ARQ's and ARC's, but am not sure what port 1720 is used for...here is part of the Etherpeek trace: TCP - Transport Control Protocol Source Port: 64642 Destination Port: 1720 RAS Transport Layer Service Access Point can anyone help? cheers, Matthew. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=21546t=21519 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: TCP H.225 [7:21519]
Patrick, thanks for your help. Matthew. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=21625t=21519 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
TCP H.225 [7:21519]
Hi all, I am a recent CCNA graduate, and am about to tackle the challenges of the CCNP Routing 2.0 exam. Look forward to asking/providing help where possible! Anyway, I have a question - does anyone know the ITU spec, or RFC that deals with TCP ports for H.225 RAS messages. I know that port 1719 is used for ARQ's and ARC's, but am not sure what port 1720 is used for...here is part of the Etherpeek trace: TCP - Transport Control Protocol Source Port: 64642 Destination Port: 1720 RAS Transport Layer Service Access Point can anyone help? cheers, Matthew. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=21519t=21519 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
H.323 [7:20295]
Does any one have experience with H.323 Polycom units? If so any hints on why they can be drooping the connection to the remote site while they are in session. All of the units are sitting behind the Cisco Pix firewall. Thanks, Alex [GroupStudy.com removed an attachment of type text/x-vcard which had a name of khramov.vcf] Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=20295t=20295 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Query Regarding PA-H [7:16644]
Hi, Apologies for a very trivial question. I am trying to find out whether the HSSI interface (PA-H) for the 7200 contains the IOS sub-command clock rate 'bps'. In other words does it cater for standard serial variable clock rate. I am aware that for standard serial interfaces the command is always available however, perusing over Cisco documentation, in particular the URL below specifies the command is available, however, upon further investigation the clock rate command is linked to the interface serial x/x command and does not seem to be present under the interface hssi x/x command. http://www.cisco.com/univercd/cc/td/doc/product/cable/cab_rout/cfig_nts/3280 hssi/3280conf.htm#36726 Would appreciate is you could shed some light for me! Thanks Again. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=16644t=16644 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: quality of service for h.323 [7:15857]
I'm not sure this works on ATM interfaces in your environment, but on serial interfaces I've been having wonderful results with CBWFQ/LLQ. This allows you to define multiple classes of traffic and treat them each differently. In our case, I use a strict priority queue for video or voice traffic up to a bandwidth limit that I define, and all other default traffic uses WFQ with WRED. This works great for us, your mileage may vary. Regards, John george gittins 8/13/01 7:08:14 AM Hi there does anyone know which queing implementation is better for video over ip in a atm enviorment Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=16053t=15857 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
quality of service for h.323 [7:15857]
Hi there does anyone know which queing implementation is better for video over ip in a atm enviorment Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=15857t=15857 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Can Firewall and H.323 be run on a Cisco 2621? [7:4700]
I am told that you cannot run the Firewall feature and H.323 simultaneously on a router. Does anyone know this to be true? Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=4700t=4700 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
¦³ÉAInternet Share Router¦n¤¶²Ð§r¡H [7:2690]
Ul%N6}Internet Share Router o,J%N$a!A'Aa9orouter3IA$_1o'r!H1o6o$$U-1-S (6I6I0U!C -- 3Comp.Broadband - $@-S1M,01zS3]o,Je@W7s;D2U 3Comp.Broadband - Your own Broadband Newsgroup news://news.3home.net/3comp.broadband 3talk.ITPeople - IT$Ho,J%@,I 3talk.ITPeople - IT People's World news://news.3home.net/3talk.ITpeople Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=2690t=2690 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: !H !H !H!H
Of course, that is what I meant. Not that the workstation sends an ICMP, but that what it recieves from the router is simply a timeout. - Original Message - From: "Priscilla Oppenheimer" [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, November 20, 2000 4:47 PM Subject: Re: !H !H !H!H At 03:25 PM 11/20/00, Chris Larson wrote: Even if this was correct you cannot simply by getting an !h say that this is from an access-list. There are many reasons for a host unreachable message. Also, from most workstations (Windows that is), you will simply get a timeout and neither !A or !h from packets being denied by an access-list. Sending a Destination Unreachable is the job of the Router, not the workstation. Whether it sends an A, H, or nothing depends on the implementation of ICMP that it is running. Priscilla - Original Message - From: "Rossetti, Stan" [EMAIL PROTECTED] To: "'Jennifer Cribbs'" [EMAIL PROTECTED]; "cisco" [EMAIL PROTECTED]; "Rossetti, Stan" [EMAIL PROTECTED] Sent: Monday, November 20, 2000 2:23 PM Subject: RE: !H !H !H!H Are you sure? Page 1163 of Cisco IOS Configuration Fundamentals states that the character A signifies that the destination is "Administratively Unreachable. Usually, this output indicates that an access list is blocking traffic." -Original Message- From: Jennifer Cribbs [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 1:13 PM To: cisco; [EMAIL PROTECTED] Subject: RE: !H !H !H!H On the traceroute command: !H is returned 3 times if an access list prevents a router from forwarding the packet to the HOST. The 'trace' command is used to determine the route taken to a remote host. All the hops are shown as the trace probe moves toward the destination. Three probes are issued. The response time of each probe will be displayed if successful. The trace command returns a N if the network is unreachable. The P is the response if the protocol is unreachable. An * is a timeout. !H is the return for what I said above but it is regarding a traceroute command, and not a ping. Jennifer Cribbs [EMAIL PROTECTED] = Original Message From "Rossetti, Stan" [EMAIL PROTECTED] = I thought !A meant this path is blocked by an access list. -Original Message- From: Jennifer Cribbs [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 12:13 PM To: [EMAIL PROTECTED] Subject: RE: !H not a complete answer This response is returned when an access list somewhere along the path prevents a router from forwarding a packet to the HOST. and that is correct. Jennifer Cribbs [EMAIL PROTECTED] = Original Message From "Croyle, James" [EMAIL PROTECTED] = http://www.cisco.com/warp/public/112/chapter7.htm I think you have a routing loop as is described here. Ping from several stations and map it out. Jim -Original Message- From: Miller, Nathan (AZ15) To: Richard Bosire; Jason yee Cc: John Huston; [EMAIL PROTECTED] Sent: 11/20/00 11:15 AM Subject: RE: !H Does it meas that the destination NETWORK is unreachable or the destination HOST?? -Original Message- From: Richard Bosire [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 8:01 AM To: Jason yee Cc: John Huston; [EMAIL PROTECTED] Subject: Re: !H destination unreachable i.e not path to the destination network Jason yee wrote: hi anyone knows what does the symbol !H means in traceroute results __ Do You Yahoo!? Yahoo! Calendar - Get organized for the holidays! http://calendar.yahoo.com/ _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] -- ___ «¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤ Richard Bosire Network Engineer CCNA,CCSE AfricaOnline (k) Ltd tel +254-2-243775 fax +254-2-243762 http://www.africaonline.co.ke _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription inf
Re: !H !H !H!H
My point being that the response you will see at a workstation will not always be the same as the response you will see at the console of a Cisco router. The router generally has a more robust implementation of ICMP then the Windows workstation. In a sniffer trace you will see certain types of ICMP replies that the Windows boxes simply report as destination unreachables, or even timeouts even though the ICMP type as specified by6 the RFC's is not simply unreachable. Of course, that is what I meant. Not that the workstation sends an ICMP, but that what it recieves from the router is simply a timeout. - Original Message - From: "Priscilla Oppenheimer" [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, November 20, 2000 4:47 PM Subject: Re: !H !H !H!H At 03:25 PM 11/20/00, Chris Larson wrote: Even if this was correct you cannot simply by getting an !h say that this is from an access-list. There are many reasons for a host unreachable message. Also, from most workstations (Windows that is), you will simply get a timeout and neither !A or !h from packets being denied by an access-list. Sending a Destination Unreachable is the job of the Router, not the workstation. Whether it sends an A, H, or nothing depends on the implementation of ICMP that it is running. Priscilla - Original Message - From: "Rossetti, Stan" [EMAIL PROTECTED] To: "'Jennifer Cribbs'" [EMAIL PROTECTED]; "cisco" [EMAIL PROTECTED]; "Rossetti, Stan" [EMAIL PROTECTED] Sent: Monday, November 20, 2000 2:23 PM Subject: RE: !H !H !H!H Are you sure? Page 1163 of Cisco IOS Configuration Fundamentals states that the character A signifies that the destination is "Administratively Unreachable. Usually, this output indicates that an access list is blocking traffic." -Original Message- From: Jennifer Cribbs [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 1:13 PM To: cisco; [EMAIL PROTECTED] Subject: RE: !H !H !H!H On the traceroute command: !H is returned 3 times if an access list prevents a router from forwarding the packet to the HOST. The 'trace' command is used to determine the route taken to a remote host. All the hops are shown as the trace probe moves toward the destination. Three probes are issued. The response time of each probe will be displayed if successful. The trace command returns a N if the network is unreachable. The P is the response if the protocol is unreachable. An * is a timeout. !H is the return for what I said above but it is regarding a traceroute command, and not a ping. Jennifer Cribbs [EMAIL PROTECTED] = Original Message From "Rossetti, Stan" [EMAIL PROTECTED] = I thought !A meant this path is blocked by an access list. -Original Message- From: Jennifer Cribbs [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 12:13 PM To: [EMAIL PROTECTED] Subject: RE: !H not a complete answer This response is returned when an access list somewhere along the path prevents a router from forwarding a packet to the HOST. and that is correct. Jennifer Cribbs [EMAIL PROTECTED] = Original Message From "Croyle, James" [EMAIL PROTECTED] = http://www.cisco.com/warp/public/112/chapter7.htm I think you have a routing loop as is described here. Ping from several stations and map it out. Jim -Original Message- From: Miller, Nathan (AZ15) To: Richard Bosire; Jason yee Cc: John Huston; [EMAIL PROTECTED] Sent: 11/20/00 11:15 AM Subject: RE: !H Does it meas that the destination NETWORK is unreachable or the destination HOST?? -Original Message- From: Richard Bosire [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 8:01 AM To: Jason yee Cc: John Huston; [EMAIL PROTECTED] Subject: Re: !H destination unreachable i.e not path to the destination network Jason yee wrote: hi anyone knows what does the symbol !H means in traceroute results __ Do You Yahoo!? Yahoo! Calendar - Get organized for the holidays! http://calendar.yahoo.com/ _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] -- ___ «¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤ Richard Bosire Network Engineer CCNA,CCSE AfricaOnline (k) Ltd tel +254-2-243775 fax +254-2-243762 http://www.africaonline.co.ke _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTE
Re: !H !H !H!H I GOT IT!! THANKS ALL!
The real important thing when working with computers in the real world to remember is:(and you will make it) 1. Don't ever say, always or never to an engineer. They will prove you wrong. 2. Read the vendor docs but don't believe them. Test everything!!! I work in a test lab environment in which we certify hardware and software before we place it on our network. Which is in the millions of hosts. We are a communications company. I made the same mistake early on to the other computer/network/electrical engineers I work with by saying "the documentation says" when they all got up off the ground and stopped laughing at me. They told me, if we went by what the documentation says we would not need a test lab, we would all lose our job, and that salesmen would rule the world not engineers. 3. Reinvent yourself every 6 months. There is no such thing as old in engineering just A. Obsolete - we don't use it anymore B. Foundation - what all new is built on C. New - what we use today, but will be either A or B tomorrow. 4. The engineering creed - a. Keep it simple. b. Don't reinvent the wheel. My personal favorite: c. Don't work any harder than you have to. These 4 also make a good Network Engineer so apply them, they have gotten me where I want to be. I definitely would like to see the results of your testing. If you can please send the test methodolgy, results, and config for the test. i would appreciate that. Don - Original Message - From: Jennifer Cribbs [EMAIL PROTECTED] To: Donald B Johnson Jr [EMAIL PROTECTED]; cisco [EMAIL PROTECTED] Sent: Monday, November 20, 2000 1:38 PM Subject: RE: !H !H !H!H I GOT IT!! THANKS ALL! You are correct!! And I have got tons of e-mail regarding this. I stand humbled before everyone. And I do understand. I was just telling my husband about this and he laughed. He is used to me thinking I am always correct. The good thing about this, is that I have learned about !A and !H and I want to thank everyone. The real world is different and you wait guys...I will be there one day. Jennifer Cribbs [EMAIL PROTECTED] = Original Message From "Donald B Johnson Jr" [EMAIL PROTECTED] = jennifer the reason people are jumping on this is because you stated something and then on a line under it you said and that is it or something to that effect. have you tried it out in the lab environment, that would be the answer not what is in a book, which are flawed. Duck - Original Message - From: Jennifer Cribbs [EMAIL PROTECTED] To: Rossetti, Stan [EMAIL PROTECTED]; cisco [EMAIL PROTECTED] Sent: Monday, November 20, 2000 11:45 AM Subject: RE: !H !H !H!H This is where I am getting my info.. Ref: chapter 8 of Intro to Cisco Router Configuration pages 229-230 It says responses to trace command include: !H The probe was rceived by the router, but not forwarded, usually due to an access list. PThe protocol was unreachable NThe network was unreachable UThe port was unreachable *Timout Jennifer Cribbs [EMAIL PROTECTED] = Original Message From "Rossetti, Stan" [EMAIL PROTECTED] = Are you sure? Page 1163 of Cisco IOS Configuration Fundamentals states that the character A signifies that the destination is "Administratively Unreachable. Usually, this output indicates that an access list is blocking traffic." -Original Message- From: Jennifer Cribbs [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 1:13 PM To: cisco; [EMAIL PROTECTED] Subject: RE: !H !H !H!H On the traceroute command: !H is returned 3 times if an access list prevents a router from forwarding the packet to the HOST. The 'trace' command is used to determine the route taken to a remote host. All the hops are shown as the trace probe moves toward the destination. Three probes are issued. The response time of each probe will be displayed if successful. The trace command returns a N if the network is unreachable. The P is the response if the protocol is unreachable. An * is a timeout. !H is the return for what I said above but it is regarding a traceroute command, and not a ping. Jennifer Cribbs [EMAIL PROTECTED] = Original Message From "Rossetti, Stan" [EMAIL PROTECTED] = I thought !A meant this path is blocked by an access list. -Original Message- From: Jennifer Cribbs [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 12:13 PM To: [EMAIL PROTECTED] Subject: RE: !H not a complete answer This response is returned when an access list somewhere along the path prevents a router from forwarding a packet to the HOST. and that is correct. Jennifer Cribbs [EMAIL PROTECTED] = Original Message From "Croyle, James" [EMAIL PROTECTED] = http://www.cisco.com/warp/public/112/chapter7.htm I think you have a routing loop as is described here. Ping from several stations and map it out. Jim -Original Message- From: Miller, Nathan (AZ15) To:
Re: !H !H !H!H
At 08:13 AM 11/21/00, Chris Larson wrote: My point being that the response you will see at a workstation will not always be the same as the response you will see at the console of a Cisco router. The router generally has a more robust implementation of ICMP then the Windows workstation. In a sniffer trace you will see certain types of ICMP replies that the Windows boxes simply report as destination unreachables, or even timeouts even though the ICMP type as specified by6 the RFC's is not simply unreachable. I could believe that some implementations don't always provide to the end user the code that goes with the Destination Unreachable message. I have also seen MS-DOS Ping report a timeout even though the router sent a reply or ICMP message. Sniffing is required to know what's really going on. How much ICMP an OS must implement is standardized by the IETF in the Host Requirements document, RFC 1112, but the document is unclear regarding how many details to report to the user. (It doesn't really deal with users whatsoever). One LAST comment (I promise): There are some cases where it's the end node (workstation, server, or whatever) that sends back the Destination Unreachable. A workstation might send a Protocol Unreachable or Port Unreachable. Protocol Unreachable means the station doesn't understand the protocol field in the IP header. Port Unreachable means it doesn't recognize the TCP or UDP port. Some varieties of traceroute take advantage of the fact that a workstation will send back a Dest Unreachable, Port Unreachable. In particular, most Cisco and UNIX traceroute implementations send to a large UDP port number that won't be recognized by the end node. The end node sends back Dest Unreachable, Port Unreachable. This is a good thing because it lets you traceroute all the way to the end node, past all the routers in the chain. I am going on and on about this subject because I think it's so important. An understanding of Destination Unreachable means a good understanding of how packets are forwarded in an internetwork. My messages aren't directed to anyone in particular, (in case you're wondering, Chris). I'm just using them as a "training" forum. I can't help it. Once an instructor, always an instructor. ;-) Priscilla Of course, that is what I meant. Not that the workstation sends an ICMP, but that what it recieves from the router is simply a timeout. - Original Message - From: "Priscilla Oppenheimer" [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, November 20, 2000 4:47 PM Subject: Re: !H !H !H!H At 03:25 PM 11/20/00, Chris Larson wrote: Even if this was correct you cannot simply by getting an !h say that this is from an access-list. There are many reasons for a host unreachable message. Also, from most workstations (Windows that is), you will simply get a timeout and neither !A or !h from packets being denied by an access-list. Sending a Destination Unreachable is the job of the Router, not the workstation. Whether it sends an A, H, or nothing depends on the implementation of ICMP that it is running. Priscilla Priscilla Oppenheimer http://www.priscilla.com _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
What does !H, !N !P Represent
Hi Folks, For your information! In the output, an "!N" represents ICMP network unreachable, "!H" represents ICMP host unreachable, "!P" represents ICMP protocol unreachable, and "!Q" represents source quench received. The asterisk "*" represents time-out, and "?" represents unknown packet type. Jacobus van den Berg e-mail: [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
!H
hi anyone knows what does the symbol !H means in traceroute results __ Do You Yahoo!? Yahoo! Calendar - Get organized for the holidays! http://calendar.yahoo.com/ _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: !H
Host unreachable. --phil On Mon, 20 Nov 2000, Jason yee wrote: hi anyone knows what does the symbol !H means in traceroute results _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: !H
destination unreachable i.e not path to the destination network Jason yee wrote: hi anyone knows what does the symbol !H means in traceroute results __ Do You Yahoo!? Yahoo! Calendar - Get organized for the holidays! http://calendar.yahoo.com/ _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] -- ___ Richard Bosire Network Engineer CCNA,CCSE AfricaOnline (k) Ltd tel +254-2-243775 fax +254-2-243762 http://www.africaonline.co.ke _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: !H
Does it meas that the destination NETWORK is unreachable or the destination HOST?? -Original Message- From: Richard Bosire [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 8:01 AM To: Jason yee Cc: John Huston; [EMAIL PROTECTED] Subject: Re: !H destination unreachable i.e not path to the destination network Jason yee wrote: hi anyone knows what does the symbol !H means in traceroute results __ Do You Yahoo!? Yahoo! Calendar - Get organized for the holidays! http://calendar.yahoo.com/ _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] -- ___ «¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤ Richard Bosire Network Engineer CCNA,CCSE AfricaOnline (k) Ltd tel +254-2-243775 fax +254-2-243762 http://www.africaonline.co.ke _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: !H
A !H indicates that the router at that hop doesn't know anything about the target address; the packet comes back to the source with a message saying "No Forwarding Address". gabriel - Original Message - From: "Jason yee" [EMAIL PROTECTED] To: "John Huston" [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Monday, November 20, 2000 3:20 PM Subject: !H hi anyone knows what does the symbol !H means in traceroute results __ Do You Yahoo!? Yahoo! Calendar - Get organized for the holidays! http://calendar.yahoo.com/ _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: !H
http://www.cisco.com/warp/public/112/chapter7.htm I think you have a routing loop as is described here. Ping from several stations and map it out. Jim -Original Message- From: Miller, Nathan (AZ15) To: Richard Bosire; Jason yee Cc: John Huston; [EMAIL PROTECTED] Sent: 11/20/00 11:15 AM Subject: RE: !H Does it meas that the destination NETWORK is unreachable or the destination HOST?? -Original Message- From: Richard Bosire [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 8:01 AM To: Jason yee Cc: John Huston; [EMAIL PROTECTED] Subject: Re: !H destination unreachable i.e not path to the destination network Jason yee wrote: hi anyone knows what does the symbol !H means in traceroute results __ Do You Yahoo!? Yahoo! Calendar - Get organized for the holidays! http://calendar.yahoo.com/ _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] -- ___ «¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤ Richard Bosire Network Engineer CCNA,CCSE AfricaOnline (k) Ltd tel +254-2-243775 fax +254-2-243762 http://www.africaonline.co.ke _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: !H
That sounds like a Boson question, as a matter of fact, I remember getting it wrong by saying destination network unreachable, and not destination host unreachable. I never did check to see what the Cisco answer was Tim -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Miller, Nathan (AZ15) Sent: Monday, November 20, 2000 5:16 PM To: Richard Bosire; Jason yee Cc: John Huston; [EMAIL PROTECTED] Subject: RE: !H Does it meas that the destination NETWORK is unreachable or the destination HOST?? -Original Message- From: Richard Bosire [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 8:01 AM To: Jason yee Cc: John Huston; [EMAIL PROTECTED] Subject: Re: !H destination unreachable i.e not path to the destination network Jason yee wrote: hi anyone knows what does the symbol !H means in traceroute results __ Do You Yahoo!? Yahoo! Calendar - Get organized for the holidays! http://calendar.yahoo.com/ _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] -- ___ «¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤ Richard Bosire Network Engineer CCNA,CCSE AfricaOnline (k) Ltd tel +254-2-243775 fax +254-2-243762 http://www.africaonline.co.ke _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: !H
A routing loop will generally bounce back and forth between two interfaces when you do a traceroute. Host unreachable just means the box is down and a route still remains for it. andy On Mon, 20 Nov 2000, Croyle, James wrote: http://www.cisco.com/warp/public/112/chapter7.htm I think you have a routing loop as is described here. Ping from several stations and map it out. Jim -Original Message- From: Miller, Nathan (AZ15) To: Richard Bosire; Jason yee Cc: John Huston; [EMAIL PROTECTED] Sent: 11/20/00 11:15 AM Subject: RE: !H Does it meas that the destination NETWORK is unreachable or the destination HOST?? -Original Message- From: Richard Bosire [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 8:01 AM To: Jason yee Cc: John Huston; [EMAIL PROTECTED] Subject: Re: !H destination unreachable i.e not path to the destination network Jason yee wrote: hi anyone knows what does the symbol !H means in traceroute results __ Do You Yahoo!? Yahoo! Calendar - Get organized for the holidays! http://calendar.yahoo.com/ _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] -- ___ «¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤ Richard Bosire Network Engineer CCNA,CCSE AfricaOnline (k) Ltd tel +254-2-243775 fax +254-2-243762 http://www.africaonline.co.ke _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: !H
It means the destination network is unreachable due to an access list on a router somewhere along the way. [EMAIL PROTECTED] = Original Message From "Croyle, James" [EMAIL PROTECTED] = http://www.cisco.com/warp/public/112/chapter7.htm I think you have a routing loop as is described here. Ping from several stations and map it out. Jim -Original Message- From: Miller, Nathan (AZ15) To: Richard Bosire; Jason yee Cc: John Huston; [EMAIL PROTECTED] Sent: 11/20/00 11:15 AM Subject: RE: !H Does it meas that the destination NETWORK is unreachable or the destination HOST?? -Original Message- From: Richard Bosire [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 8:01 AM To: Jason yee Cc: John Huston; [EMAIL PROTECTED] Subject: Re: !H destination unreachable i.e not path to the destination network Jason yee wrote: hi anyone knows what does the symbol !H means in traceroute results __ Do You Yahoo!? Yahoo! Calendar - Get organized for the holidays! http://calendar.yahoo.com/ _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] -- ___ «¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤ Richard Bosire Network Engineer CCNA,CCSE AfricaOnline (k) Ltd tel +254-2-243775 fax +254-2-243762 http://www.africaonline.co.ke _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: !H not a complete answer
This response is returned when an access list somewhere along the path prevents a router from forwarding a packet to the HOST. and that is correct. Jennifer Cribbs [EMAIL PROTECTED] = Original Message From "Croyle, James" [EMAIL PROTECTED] = http://www.cisco.com/warp/public/112/chapter7.htm I think you have a routing loop as is described here. Ping from several stations and map it out. Jim -Original Message- From: Miller, Nathan (AZ15) To: Richard Bosire; Jason yee Cc: John Huston; [EMAIL PROTECTED] Sent: 11/20/00 11:15 AM Subject: RE: !H Does it meas that the destination NETWORK is unreachable or the destination HOST?? -Original Message- From: Richard Bosire [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 8:01 AM To: Jason yee Cc: John Huston; [EMAIL PROTECTED] Subject: Re: !H destination unreachable i.e not path to the destination network Jason yee wrote: hi anyone knows what does the symbol !H means in traceroute results __ Do You Yahoo!? Yahoo! Calendar - Get organized for the holidays! http://calendar.yahoo.com/ _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] -- ___ «¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤ Richard Bosire Network Engineer CCNA,CCSE AfricaOnline (k) Ltd tel +254-2-243775 fax +254-2-243762 http://www.africaonline.co.ke _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: !H not a complete answer
From cisco: "If the router receives a datagram which it is unable to deliver to it's ultimate destination because it knows of no route to the destination address, it replies to the originator of that datagram with an ICMP Host Unreachable message." An access-list denying icmp echo-requests will simply not permit the forwarding of icmp echo-requests. From the use of ping, this would be observed as timeouts rather than "Host Unreachable" or "!H". --phil | -Original Message- | From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of | Jennifer Cribbs | Sent: Monday, November 20, 2000 1:13 PM | To: [EMAIL PROTECTED] | Subject: RE: !H not a complete answer | | | This response is returned when an access list somewhere along the path | prevents a router from forwarding a packet to the HOST. | | and that is correct. | | Jennifer Cribbs | [EMAIL PROTECTED] | | _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: !H not a complete answer
I thought !A meant this path is blocked by an access list. -Original Message- From: Jennifer Cribbs [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 12:13 PM To: [EMAIL PROTECTED] Subject: RE: !H not a complete answer This response is returned when an access list somewhere along the path prevents a router from forwarding a packet to the HOST. and that is correct. Jennifer Cribbs [EMAIL PROTECTED] = Original Message From "Croyle, James" [EMAIL PROTECTED] = http://www.cisco.com/warp/public/112/chapter7.htm I think you have a routing loop as is described here. Ping from several stations and map it out. Jim -Original Message- From: Miller, Nathan (AZ15) To: Richard Bosire; Jason yee Cc: John Huston; [EMAIL PROTECTED] Sent: 11/20/00 11:15 AM Subject: RE: !H Does it meas that the destination NETWORK is unreachable or the destination HOST?? -Original Message- From: Richard Bosire [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 8:01 AM To: Jason yee Cc: John Huston; [EMAIL PROTECTED] Subject: Re: !H destination unreachable i.e not path to the destination network Jason yee wrote: hi anyone knows what does the symbol !H means in traceroute results __ Do You Yahoo!? Yahoo! Calendar - Get organized for the holidays! http://calendar.yahoo.com/ _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] -- ___ «¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤ Richard Bosire Network Engineer CCNA,CCSE AfricaOnline (k) Ltd tel +254-2-243775 fax +254-2-243762 http://www.africaonline.co.ke _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: !H !H !H!H
On the traceroute command: !H is returned 3 times if an access list prevents a router from forwarding the packet to the HOST. The 'trace' command is used to determine the route taken to a remote host. All the hops are shown as the trace probe moves toward the destination. Three probes are issued. The response time of each probe will be displayed if successful. The trace command returns a N if the network is unreachable. The P is the response if the protocol is unreachable. An * is a timeout. !H is the return for what I said above but it is regarding a traceroute command, and not a ping. Jennifer Cribbs [EMAIL PROTECTED] = Original Message From "Rossetti, Stan" [EMAIL PROTECTED] = I thought !A meant this path is blocked by an access list. -Original Message- From: Jennifer Cribbs [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 12:13 PM To: [EMAIL PROTECTED] Subject: RE: !H not a complete answer This response is returned when an access list somewhere along the path prevents a router from forwarding a packet to the HOST. and that is correct. Jennifer Cribbs [EMAIL PROTECTED] = Original Message From "Croyle, James" [EMAIL PROTECTED] = http://www.cisco.com/warp/public/112/chapter7.htm I think you have a routing loop as is described here. Ping from several stations and map it out. Jim -Original Message- From: Miller, Nathan (AZ15) To: Richard Bosire; Jason yee Cc: John Huston; [EMAIL PROTECTED] Sent: 11/20/00 11:15 AM Subject: RE: !H Does it meas that the destination NETWORK is unreachable or the destination HOST?? -Original Message- From: Richard Bosire [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 8:01 AM To: Jason yee Cc: John Huston; [EMAIL PROTECTED] Subject: Re: !H destination unreachable i.e not path to the destination network Jason yee wrote: hi anyone knows what does the symbol !H means in traceroute results __ Do You Yahoo!? Yahoo! Calendar - Get organized for the holidays! http://calendar.yahoo.com/ _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] -- ___ «¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤ Richard Bosire Network Engineer CCNA,CCSE AfricaOnline (k) Ltd tel +254-2-243775 fax +254-2-243762 http://www.africaonline.co.ke _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: !H !H !H!H
Are you sure? Page 1163 of Cisco IOS Configuration Fundamentals states that the character A signifies that the destination is "Administratively Unreachable. Usually, this output indicates that an access list is blocking traffic." -Original Message- From: Jennifer Cribbs [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 1:13 PM To: cisco; [EMAIL PROTECTED] Subject: RE: !H !H !H!H On the traceroute command: !H is returned 3 times if an access list prevents a router from forwarding the packet to the HOST. The 'trace' command is used to determine the route taken to a remote host. All the hops are shown as the trace probe moves toward the destination. Three probes are issued. The response time of each probe will be displayed if successful. The trace command returns a N if the network is unreachable. The P is the response if the protocol is unreachable. An * is a timeout. !H is the return for what I said above but it is regarding a traceroute command, and not a ping. Jennifer Cribbs [EMAIL PROTECTED] = Original Message From "Rossetti, Stan" [EMAIL PROTECTED] = I thought !A meant this path is blocked by an access list. -Original Message- From: Jennifer Cribbs [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 12:13 PM To: [EMAIL PROTECTED] Subject: RE: !H not a complete answer This response is returned when an access list somewhere along the path prevents a router from forwarding a packet to the HOST. and that is correct. Jennifer Cribbs [EMAIL PROTECTED] = Original Message From "Croyle, James" [EMAIL PROTECTED] = http://www.cisco.com/warp/public/112/chapter7.htm I think you have a routing loop as is described here. Ping from several stations and map it out. Jim -Original Message- From: Miller, Nathan (AZ15) To: Richard Bosire; Jason yee Cc: John Huston; [EMAIL PROTECTED] Sent: 11/20/00 11:15 AM Subject: RE: !H Does it meas that the destination NETWORK is unreachable or the destination HOST?? -Original Message- From: Richard Bosire [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 8:01 AM To: Jason yee Cc: John Huston; [EMAIL PROTECTED] Subject: Re: !H destination unreachable i.e not path to the destination network Jason yee wrote: hi anyone knows what does the symbol !H means in traceroute results __ Do You Yahoo!? Yahoo! Calendar - Get organized for the holidays! http://calendar.yahoo.com/ _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] -- ___ «¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤ Richard Bosire Network Engineer CCNA,CCSE AfricaOnline (k) Ltd tel +254-2-243775 fax +254-2-243762 http://www.africaonline.co.ke _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: !H not a complete answer
I thought the original question was in regard to traceroute results and not ping. Look at the original question at the bottom of this page. [EMAIL PROTECTED] = Original Message From "Phillip Heller" [EMAIL PROTECTED] = From cisco: "If the router receives a datagram which it is unable to deliver to it's ultimate destination because it knows of no route to the destination address, it replies to the originator of that datagram with an ICMP Host Unreachable message." An access-list denying icmp echo-requests will simply not permit the forwarding of icmp echo-requests. From the use of ping, this would be observed as timeouts rather than "Host Unreachable" or "!H". --phil | -Original Message- | From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of | Jennifer Cribbs | Sent: Monday, November 20, 2000 1:13 PM | To: [EMAIL PROTECTED] | Subject: RE: !H not a complete answer | | | This response is returned when an access list somewhere along the path | prevents a router from forwarding a packet to the HOST. | | and that is correct. | | Jennifer Cribbs | [EMAIL PROTECTED] | | | = Original Message From "Croyle, James" | [EMAIL PROTECTED] = | http://www.cisco.com/warp/public/112/chapter7.htm | | I think you have a routing loop as is described here. Ping from several | stations and map it out. | | Jim | | | -Original Message- | From: Miller, Nathan (AZ15) | To: Richard Bosire; Jason yee | Cc: John Huston; [EMAIL PROTECTED] | Sent: 11/20/00 11:15 AM | Subject: RE: !H | | Does it meas that the destination NETWORK is unreachable or the | destination | HOST?? | | -Original Message- | From: Richard Bosire [mailto:[EMAIL PROTECTED]] | Sent: Monday, November 20, 2000 8:01 AM | To: Jason yee | Cc: John Huston; [EMAIL PROTECTED] | Subject: Re: !H | | | destination unreachable i.e not path to the destination network | | Jason yee wrote: | | hi anyone knows what does the symbol !H means in | traceroute results | | __ | Do You Yahoo!? | Yahoo! Calendar - Get organized for the holidays! | http://calendar.yahoo.com/ | | _ | FAQ, list archives, and subscription info: | http://www.groupstudy.com/list/cisco.html | Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] | | -- | ___ | «¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤ | | Richard Bosire | Network Engineer CCNA,CCSE | AfricaOnline (k) Ltd | tel +254-2-243775 fax +254-2-243762 | http://www.africaonline.co.ke | | | _ | FAQ, list archives, and subscription info: | http://www.groupstudy.com/list/cisco.html | Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] | | _ | FAQ, list archives, and subscription info: | http://www.groupstudy.com/list/cisco.html | Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] | | _ | FAQ, list archives, and subscription info: | http://www.groupstudy.com/list/cisco.html | Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] | | _ | FAQ, list archives, and subscription info: | http://www.groupstudy.com/list/cisco.html | Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] | _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
FW: !H !H !H!H
-Original Message- From: Rossetti, Stan Sent: Monday, November 20, 2000 1:24 PM To: 'Jennifer Cribbs'; cisco; Rossetti, Stan Subject: RE: !H !H !H!H Are you sure? Page 1163 of Cisco IOS Configuration Fundamentals states that the character A signifies that the destination is "Administratively Unreachable. Usually, this output indicates that an access list is blocking traffic." -Original Message- From: Jennifer Cribbs [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 1:13 PM To: cisco; [EMAIL PROTECTED] Subject: RE: !H !H !H!H On the traceroute command: !H is returned 3 times if an access list prevents a router from forwarding the packet to the HOST. The 'trace' command is used to determine the route taken to a remote host. All the hops are shown as the trace probe moves toward the destination. Three probes are issued. The response time of each probe will be displayed if successful. The trace command returns a N if the network is unreachable. The P is the response if the protocol is unreachable. An * is a timeout. !H is the return for what I said above but it is regarding a traceroute command, and not a ping. Jennifer Cribbs [EMAIL PROTECTED] = Original Message From "Rossetti, Stan" [EMAIL PROTECTED] = I thought !A meant this path is blocked by an access list. -Original Message- From: Jennifer Cribbs [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 12:13 PM To: [EMAIL PROTECTED] Subject: RE: !H not a complete answer This response is returned when an access list somewhere along the path prevents a router from forwarding a packet to the HOST. and that is correct. Jennifer Cribbs [EMAIL PROTECTED] = Original Message From "Croyle, James" [EMAIL PROTECTED] = http://www.cisco.com/warp/public/112/chapter7.htm I think you have a routing loop as is described here. Ping from several stations and map it out. Jim -Original Message- From: Miller, Nathan (AZ15) To: Richard Bosire; Jason yee Cc: John Huston; [EMAIL PROTECTED] Sent: 11/20/00 11:15 AM Subject: RE: !H Does it meas that the destination NETWORK is unreachable or the destination HOST?? -Original Message- From: Richard Bosire [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 8:01 AM To: Jason yee Cc: John Huston; [EMAIL PROTECTED] Subject: Re: !H destination unreachable i.e not path to the destination network Jason yee wrote: hi anyone knows what does the symbol !H means in traceroute results __ Do You Yahoo!? Yahoo! Calendar - Get organized for the holidays! http://calendar.yahoo.com/ _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] -- ___ «¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤ Richard Bosire Network Engineer CCNA,CCSE AfricaOnline (k) Ltd tel +254-2-243775 fax +254-2-243762 http://www.africaonline.co.ke _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: !H not a complete answer
I have always seen the !H replies when there is not a route to the destination and when there is an access-list blocking the router then the reply is !A using traceroute. -Original Message- From: Jennifer Cribbs [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 12:57 PM To: [EMAIL PROTECTED] Subject: RE: !H not a complete answer I thought the original question was in regard to traceroute results and not ping. Look at the original question at the bottom of this page. [EMAIL PROTECTED] = Original Message From "Phillip Heller" [EMAIL PROTECTED] = From cisco: "If the router receives a datagram which it is unable to deliver to it's ultimate destination because it knows of no route to the destination address, it replies to the originator of that datagram with an ICMP Host Unreachable message." An access-list denying icmp echo-requests will simply not permit the forwarding of icmp echo-requests. From the use of ping, this would be observed as timeouts rather than "Host Unreachable" or "!H". --phil | -Original Message- | From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of | Jennifer Cribbs | Sent: Monday, November 20, 2000 1:13 PM | To: [EMAIL PROTECTED] | Subject: RE: !H not a complete answer | | | This response is returned when an access list somewhere along the path | prevents a router from forwarding a packet to the HOST. | | and that is correct. | | Jennifer Cribbs | [EMAIL PROTECTED] | | | = Original Message From "Croyle, James" | [EMAIL PROTECTED] = | http://www.cisco.com/warp/public/112/chapter7.htm | | I think you have a routing loop as is described here. Ping from several | stations and map it out. | | Jim | | | -Original Message- | From: Miller, Nathan (AZ15) | To: Richard Bosire; Jason yee | Cc: John Huston; [EMAIL PROTECTED] | Sent: 11/20/00 11:15 AM | Subject: RE: !H | | Does it meas that the destination NETWORK is unreachable or the | destination | HOST?? | | -Original Message- | From: Richard Bosire [mailto:[EMAIL PROTECTED]] | Sent: Monday, November 20, 2000 8:01 AM | To: Jason yee | Cc: John Huston; [EMAIL PROTECTED] | Subject: Re: !H | | | destination unreachable i.e not path to the destination network | | Jason yee wrote: | | hi anyone knows what does the symbol !H means in | traceroute results | | __ | Do You Yahoo!? | Yahoo! Calendar - Get organized for the holidays! | http://calendar.yahoo.com/ | | _ | FAQ, list archives, and subscription info: | http://www.groupstudy.com/list/cisco.html | Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] | | -- | ___ | «¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤ | | Richard Bosire | Network Engineer CCNA,CCSE | AfricaOnline (k) Ltd | tel +254-2-243775 fax +254-2-243762 | http://www.africaonline.co.ke | | | _ | FAQ, list archives, and subscription info: | http://www.groupstudy.com/list/cisco.html | Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] | | _ | FAQ, list archives, and subscription info: | http://www.groupstudy.com/list/cisco.html | Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] | | _ | FAQ, list archives, and subscription info: | http://www.groupstudy.com/list/cisco.html | Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] | | _ | FAQ, list archives, and subscription info: | http://www.groupstudy.com/list/cisco.html | Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] | _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: !H !H !H!H
This is where I am getting my info.. Ref: chapter 8 of Intro to Cisco Router Configuration pages 229-230 It says responses to trace command include: !H The probe was rceived by the router, but not forwarded, usually due to an access list. PThe protocol was unreachable NThe network was unreachable UThe port was unreachable *Timout Jennifer Cribbs [EMAIL PROTECTED] = Original Message From "Rossetti, Stan" [EMAIL PROTECTED] = Are you sure? Page 1163 of Cisco IOS Configuration Fundamentals states that the character A signifies that the destination is "Administratively Unreachable. Usually, this output indicates that an access list is blocking traffic." -Original Message- From: Jennifer Cribbs [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 1:13 PM To: cisco; [EMAIL PROTECTED] Subject: RE: !H !H !H!H On the traceroute command: !H is returned 3 times if an access list prevents a router from forwarding the packet to the HOST. The 'trace' command is used to determine the route taken to a remote host. All the hops are shown as the trace probe moves toward the destination. Three probes are issued. The response time of each probe will be displayed if successful. The trace command returns a N if the network is unreachable. The P is the response if the protocol is unreachable. An * is a timeout. !H is the return for what I said above but it is regarding a traceroute command, and not a ping. Jennifer Cribbs [EMAIL PROTECTED] = Original Message From "Rossetti, Stan" [EMAIL PROTECTED] = I thought !A meant this path is blocked by an access list. -Original Message- From: Jennifer Cribbs [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 12:13 PM To: [EMAIL PROTECTED] Subject: RE: !H not a complete answer This response is returned when an access list somewhere along the path prevents a router from forwarding a packet to the HOST. and that is correct. Jennifer Cribbs [EMAIL PROTECTED] = Original Message From "Croyle, James" [EMAIL PROTECTED] = http://www.cisco.com/warp/public/112/chapter7.htm I think you have a routing loop as is described here. Ping from several stations and map it out. Jim -Original Message- From: Miller, Nathan (AZ15) To: Richard Bosire; Jason yee Cc: John Huston; [EMAIL PROTECTED] Sent: 11/20/00 11:15 AM Subject: RE: !H Does it meas that the destination NETWORK is unreachable or the destination HOST?? -Original Message- From: Richard Bosire [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 8:01 AM To: Jason yee Cc: John Huston; [EMAIL PROTECTED] Subject: Re: !H destination unreachable i.e not path to the destination network Jason yee wrote: hi anyone knows what does the symbol !H means in traceroute results __ Do You Yahoo!? Yahoo! Calendar - Get organized for the holidays! http://calendar.yahoo.com/ _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] -- ___ «¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤ Richard Bosire Network Engineer CCNA,CCSE AfricaOnline (k) Ltd tel +254-2-243775 fax +254-2-243762 http://www.africaonline.co.ke _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: !H not a complete answer
wouldn't that be an A response Duck - Original Message - From: Jennifer Cribbs [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, November 20, 2000 10:12 AM Subject: RE: !H not a complete answer This response is returned when an access list somewhere along the path prevents a router from forwarding a packet to the HOST. and that is correct. Jennifer Cribbs [EMAIL PROTECTED] = Original Message From "Croyle, James" [EMAIL PROTECTED] = http://www.cisco.com/warp/public/112/chapter7.htm I think you have a routing loop as is described here. Ping from several stations and map it out. Jim -Original Message- From: Miller, Nathan (AZ15) To: Richard Bosire; Jason yee Cc: John Huston; [EMAIL PROTECTED] Sent: 11/20/00 11:15 AM Subject: RE: !H Does it meas that the destination NETWORK is unreachable or the destination HOST?? -Original Message- From: Richard Bosire [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 8:01 AM To: Jason yee Cc: John Huston; [EMAIL PROTECTED] Subject: Re: !H destination unreachable i.e not path to the destination network Jason yee wrote: hi anyone knows what does the symbol !H means in traceroute results __ Do You Yahoo!? Yahoo! Calendar - Get organized for the holidays! http://calendar.yahoo.com/ _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] -- ___ «¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤ Richard Bosire Network Engineer CCNA,CCSE AfricaOnline (k) Ltd tel +254-2-243775 fax +254-2-243762 http://www.africaonline.co.ke _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: !H
Here are some of the error codes you may see when pinging or doing a traceroute: *---The probe timed out ?---Unknown packet type A---Administratively blocked (i.e. access list) Q---Source quench P---Protocol unreachable N---Network unreachable U---Port unreachable H---Host unreachable H means host unreachable. Jumping to the conclusion that there's a routing problem isn't logical (though I know that what's the Tech Note document says.) The host could be turned off. A host unreachable happens when the last-hop router tries to ARP for the device and doesn't get a response. They really watered down the Internetworking Troubleshooting Guide in that Tech Note. I recommend reading the real one here: http://www.cisco.com/univercd/cc/td/doc/cisintwk/itg_v1/tr1907.htm Priscilla At 12:01 PM 11/20/00, Croyle, James wrote: http://www.cisco.com/warp/public/112/chapter7.htm I think you have a routing loop as is described here. Ping from several stations and map it out. Jim -Original Message- From: Miller, Nathan (AZ15) To: Richard Bosire; Jason yee Cc: John Huston; [EMAIL PROTECTED] Sent: 11/20/00 11:15 AM Subject: RE: !H Does it meas that the destination NETWORK is unreachable or the destination HOST?? -Original Message- From: Richard Bosire [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 8:01 AM To: Jason yee Cc: John Huston; [EMAIL PROTECTED] Subject: Re: !H destination unreachable i.e not path to the destination network Jason yee wrote: hi anyone knows what does the symbol !H means in traceroute results __ Do You Yahoo!? Yahoo! Calendar - Get organized for the holidays! http://calendar.yahoo.com/ _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] -- ___ «¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤ Richard Bosire Network Engineer CCNA,CCSE AfricaOnline (k) Ltd tel +254-2-243775 fax +254-2-243762 http://www.africaonline.co.ke Priscilla Oppenheimer http://www.priscilla.com _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: !H !H !H!H
!H simply means that the host is unreachable. Whether this is because of an access list or that the host is disconnected or turned off is left to the imagination of the person receiving the !H notification. Odds are that unless you have physical access to the host in question you will not ever learn why the host was unreachable. Gragg Vaill NOS Contractor Sprint ION NOC Kansas City, Ks. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Jennifer Cribbs Sent: Monday, November 20, 2000 1:46 PM To: Rossetti, Stan; cisco Subject: RE: !H !H !H!H This is where I am getting my info.. Ref: chapter 8 of Intro to Cisco Router Configuration pages 229-230 It says responses to trace command include: !H The probe was rceived by the router, but not forwarded, usually due to an access list. PThe protocol was unreachable NThe network was unreachable UThe port was unreachable *Timout Jennifer Cribbs [EMAIL PROTECTED] = Original Message From "Rossetti, Stan" [EMAIL PROTECTED] = Are you sure? Page 1163 of Cisco IOS Configuration Fundamentals states that the character A signifies that the destination is "Administratively Unreachable. Usually, this output indicates that an access list is blocking traffic." -Original Message- From: Jennifer Cribbs [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 1:13 PM To: cisco; [EMAIL PROTECTED] Subject: RE: !H !H !H!H On the traceroute command: !H is returned 3 times if an access list prevents a router from forwarding the packet to the HOST. The 'trace' command is used to determine the route taken to a remote host. All the hops are shown as the trace probe moves toward the destination. Three probes are issued. The response time of each probe will be displayed if successful. The trace command returns a N if the network is unreachable. The P is the response if the protocol is unreachable. An * is a timeout. !H is the return for what I said above but it is regarding a traceroute command, and not a ping. Jennifer Cribbs [EMAIL PROTECTED] = Original Message From "Rossetti, Stan" [EMAIL PROTECTED] = I thought !A meant this path is blocked by an access list. -Original Message- From: Jennifer Cribbs [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 12:13 PM To: [EMAIL PROTECTED] Subject: RE: !H not a complete answer This response is returned when an access list somewhere along the path prevents a router from forwarding a packet to the HOST. and that is correct. Jennifer Cribbs [EMAIL PROTECTED] = Original Message From "Croyle, James" [EMAIL PROTECTED] = http://www.cisco.com/warp/public/112/chapter7.htm I think you have a routing loop as is described here. Ping from several stations and map it out. Jim -Original Message- From: Miller, Nathan (AZ15) To: Richard Bosire; Jason yee Cc: John Huston; [EMAIL PROTECTED] Sent: 11/20/00 11:15 AM Subject: RE: !H Does it meas that the destination NETWORK is unreachable or the destination HOST?? -Original Message- From: Richard Bosire [mailto:[EMAIL PROTECTED]] Sent: Monday, November 20, 2000 8:01 AM To: Jason yee Cc: John Huston; [EMAIL PROTECTED] Subject: Re: !H destination unreachable i.e not path to the destination network Jason yee wrote: hi anyone knows what does the symbol !H means in traceroute results __ Do You Yahoo!? Yahoo! Calendar - Get organized for the holidays! http://calendar.yahoo.com/ _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] -- ___ «¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤»§«¤»¥«¤ Richard Bosire Network Engineer CCNA,CCSE AfricaOnline (k) Ltd tel +254-2-243775 fax +254-2-243762 http://www.africaonline.co.ke _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] _ FAQ, li
