Hi,
Simple question here but how can you ensure that when an ISDN line is Up
that no matter what is configured that ONLY IP can go across the line.
_
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
Me
Its all about what you want CBAC to do for you. CXBAC is there to prevent
access from outside to your network, so from inside to outside so keep as
loose a possible, hence standard access lists.
For inbound access, then if you want CBAC to look at it, the inspection must
be more granular.
For th
Hi,
How can you ensure that only IP traverses across your ISDN line when it is
up. Scenario is that we have to run the ISDN line most efficient as
possible so that no matter what is configured on the router only IP can go
across it. I have tried a normal access list but of course for instanc
>Dear Sir
i connected router1 and router2 by BRI0 isdn line, but it showing conection
fails., not pinging , So plese give me solution on this.
> waoting for u r replay
router1
router1#sh run
Building configuration...
Current configuration:
!
version 12.0
service timestamps debug uptime
servic
Is it me or does BGP not allow you to form a peering session unless you have
a route to the host in the routing table, no matter what. It closes
connected sessions even if I have policy route data forwarding configured
and even if traffic is forwarding correctly. Is there some knob I'm
forgettin
try adding a dialer string or dialer map statement to your bri interface
-Original Message-
From: sudhakar [mailto:[EMAIL PROTECTED]]
Sent: 03 December 2001 11:18
To: [EMAIL PROTECTED]
Subject: isdn problem [7:27975]
>Dear Sir
i connected router1 and router2 by BRI0 isdn line, but it
I think what you're hearing, is that the OS looks the same. 1200 OS is set
based and reacts just like the 5000's CatOS, but not many features of
course. I think the last revision for the 1200 OS was either in 1996 or
1997.
Phil
- Original Message -
From: "Fanglo MA"
To:
Sent: Monday,
ATM interface to ATM interfaces- yes
Check out these archive links:
http://www.groupstudy.com/archives/cisco/200109/msg01872.html
http://www.groupstudy.com/archives/cisco/200109/msg01874.html
http://www.groupstudy.com/archives/cisco/200109/msg01883.html
http://www.groupstudy.com/archives/cisco/20
Assume that router1 initiates call to router2, the password
that router1 send to router2 must be the SAME with the
password configured at router2.
> router1#sh run
> username router2 password 0 router2
> router2#sh run
> Building configuration...
>
> Current configuration:
> !
> version 12.0
"baseline"
""Vajira Wijesinghe"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> In a recent sitting for the CIT paper I found a question asking to name
> the "profile" which network engineers maintain, objective being to
> monitor/record a certain type of network activity over a
> Is it me or does BGP not allow you to form a peering session unless you
have
> a route to the host in the routing table, no matter what.
Yes, eBGP won`t form a session if the peer address is not in
its route table.
> It closes
> connected sessions even if I have policy route data forwarding co
> does any body knows the tentative date of the new version of CCIE R/S
> written qualificationt test would be applied
The rumour is January 2002.
>how much material
> difference it would be compared to the old one ?
Have no idea.
> I'm preparing for CCIE R/S written test, and it seems to be a
Yes, it is set base but many commands are different such as
cat5 enable) set vlan 2 port 2-3
cat12 enable) set bridge vlan 2 port 2-3
Anyone know is it possible to load cat5 OS on cat1200?
Regards,
Fanglo
On Mon, 3 Dec 2001, Circusnuts wrote:
> I think what you're hearing, is
Remember this rule:
For CBAC to work (let something back in), it has to have an access-list
bocking it.
Let me explain. CBAC is a tool the monitors communications over an
interface and protects against session hijacking, and other hacking
exploits. It's also a tool thet lets something pass thr
>From your config, I assume you ping from router 2 to 1 since you only
have dialer map at BRI0 of router 2. I think you are missing this in the
interface config of BRI0 at router 2
ppp pap sent-username ... password .
Hope this helps...
-Original Message-
From: sudhakar [mailto:
Robert was right!
""sudhakar"" >Dear Sir
>
> i connected router1 and router2 by BRI0 isdn line, but it showing
conection
> fails., not pinging , So plese give me solution on this.
> > waoting for u r replay
>
> router1
>
> router1#sh run
> Building configuration...
>
> Current configuration:
I'm wondering if this is a trick question. My first thought is that if
you only configure an IP address on the link then only IP will pass over
the link. Without additional configuration this alone would stop IPX,
AT, bridged traffic, etc. from crossing the link.
Another thought is that DLSw+ i
I'm not sure I follow...
At any time, regardless of protocol, a remote user coming in on a vpn has
the potential to bring a hacker in with him.
>>> "SentinuS" 12/01/01 08:35AM >>>
May be. But if you use L2TP or Layer 3 transport on VPN, all your
mobile users could be Local. Thus you don't need
If I remember correctly, the last time I had to do this with a 6509 I used
115200 and it worked fine.
-Patrick
>>> "guest 2001" 12/01/01 09:29PM >>>
I found a doc about howto use xmodem to recover the image of cat5000&4000,it
says you can use the xmodem -s 38400 to download via console.And I al
They're probably talking about a baseline (monitor/record a certain type of
network activity over a period of time).
Shawn
-Original Message-
From: Mark Odette II [mailto:[EMAIL PROTECTED]]
Sent: Sunday, December 02, 2001 11:16 PM
To: [EMAIL PROTECTED]
Subject: RE: CIT question [7:27964
VLANs configured as PVLANs are done only when the VTP mode is transparent.
So the VTP
messages aren't carried or passed to the adjacent switch. You will have to
configure in
all the switches. By the way, which platform you are using and which
version of
software?
Thanks
Rajesh
Urooj's Hi-spe
This brings up an excellent point. The current exam has been around for
some time and we all know the types of things it covers. There are several
books on the topic, a bunch of sites that offer training materials and, of
course, the bosons. The new exam is an unknown beast, and it will take
Anyone using any vacls to block AppleTalk on 6500's?
Just looking for some veteran vacl guys/gals who are familiar with this. I
think the following would work but I don't want to miss anything.
set security acl mac NoAppleTalk deny any any ethertalk
commit security acl NoAppleTalk
set security a
Surely I will check. I will also check the part number and reply soon.
Thank you a lot.
-Original Message-
From: Peter Whittle [mailto:[EMAIL PROTECTED]]
Sent: sabado, 1 de dezembro de 2001 07:55
To: [EMAIL PROTECTED]
Subject: Re: VoIP MC-3810 [7:27874]
Hugo,
If you are after some e.
Oh brother... here we go again...
""Tim Booth"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > It's fine to have a healthy opinion of Cisco vs Microsoft accreditations
> but
> > I do think you are severely underestimating the new Microsoft exams.
>
> The new Microsoft ex
I have a ISDN failover connection and whenever the connection kicks in and I
do a "show IP route" I get the following information and it is not correct.
Atlanta RTR(I did "sh ip ro")- C 128.121.22.146/32 BRI0/0 When in
actuality, the BRI int on the other router is 128.121.22.146/28
I disconn
Hello Hunt,
In my understanding the shared key never go across the network. Each peer
computes it out separately. Where did you see in CCO saying that the DES key
is sent across the internet?
Alex
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=27998&t=27952
--
I have a link here for your reference. Read the section on RSA.
http://www.cisco.com/warp/public/105/IPSECpart3.html
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=27999&t=27952
--
FAQ, list archives, and subscription info: http:
Not sure what you mean by this. The VPN technology used is irrelevant. If
I have a home user who uses their laptop to access the Internet, there are
various ways that machine could become compromised. If that user then
attaches to the VPN, I have a machine on my VPN that is compromised. It
doe
The good ole PPP host route generated by PPP. If you use HDLC encap it will
not happpen but they you have to for go all the nice things PPP encap gies
ya. You can also disable the host route genration on the BRI interface.
Raul
- Original Message -
From: "Bob Perez"
To:
Sent: Monday, De
Can you send the configs of the 2 routers?
-Original Message-
From: Bob Perez [mailto:[EMAIL PROTECTED]]
Sent: Monday, December 03, 2001 1:00 PM
To: [EMAIL PROTECTED]
Subject: "sh IP route" and IP question [7:27997]
I have a ISDN failover connection and whenever the connection kicks in
Hi,
I try to connect a Cisco router to both the Internet and the office HQ. Both
connections assign a dynamic IP address when the connection i established.
The relevant part of the config (Running 11.3(9):
ip
subnet-zero
ip nat inside source list 1 interface BRI0
overload
isdn switch-type
basi
Sorry for off topic
I recentley bcame the victim of the Auction fraud the guy took my $1000 for
2621 router and now not replying for my emails and also I came to know that
thi s guy is a fraud and done similiar thing to at least 4 other people ,Now
what are the options I have to get my money back
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Thanks for the article Priscilla.
It was very enlightening.
-junovtv
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=28006&t=28005
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report mi
This is filler due to the GroupStudy bug that eliminates text with URLs at
the beginning of messages. This is filler due to the GroupStudy bug that
eliminates text with URLs at the beginning of messages. This is filler due
to the GroupStudy bug that eliminates text with URLs at the beginning o
Cool article. Thnaks!
""Priscilla Oppenheimer"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> This is filler due to the GroupStudy bug that eliminates text with URLs at
> the beginning of messages. This is filler due to the GroupStudy bug that
> eliminates text with URLs at th
I had an experience with an eBay auction where the fellow didn't ship the
router. I had paid by Money Order. He had cashed it. I contacted eBay. They
gave me the person's phone number and address. I called. He hung up. I
called the local Sheriff and filed a complaint. They visited his home. He
shi
The boson exam with over 400 question was written by Dennis Laganiere.
Sorry if I mangled your last name Dennis.
-junovtv
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=28011&t=27968
--
FAQ, list archives, and subscription info:
Configuring Sub-interfaces on a c1603
What could possibly go wrong??
It looked so easy in the book.
Does this mean I must use secondary IP addresses on the e0,
and sub-interfaces only on s0?
Eg.,
#int e0
ip address [i.p.address] [subnet.mask] secondary
#int s0.1
ip address [i.p.address] [subnet.ma
Hello all,
on using the 'show isdn status'
i get 3 lines for the layer 2 section.. one says multiple_frames_established
while the others say tei_assigned
whats does this mean? and how can i resolve this issue
regards,
John
i believe that would be boson #3
-Original Message-
From: juno vtv [mailto:[EMAIL PROTECTED]]
Sent: Monday, December 03, 2001 2:59 PM
To: [EMAIL PROTECTED]
Subject: Re: CCIE R/S written [7:27968]
The boson exam with over 400 question was written by Dennis Laganiere.
Sorry if I mangled
It has the part# 47-4567-02 Rev AO
that is later than 17-4840 rev 03
Great! :-)
-Original Message-
From: Peter Whittle [mailto:[EMAIL PROTECTED]]
Sent: sabado, 1 de dezembro de 2001 07:45
To: [EMAIL PROTECTED]
Subject: Re: VoIP MC-3810 [7:27874]
Hugo,
Your sh ver looks promising. Th
I was wondering the best way to make a call manager redundant. We have two
servers but if one goes down then the phones have to reboot. I was
wondering if anyone had clustered a call manager. And if so anything I
should look out for.
Thanks
Paul
Message Posted at:
http://www.groupstudy.com
Alex, your are 100% correct.
Whitfield & Martin (using modular arithmetic) found a beautiful
algorithm in which partners agree in a same key exchanging part of
his/her initial secret key. Never the key will be exchanged in the
public network. As the key is the same for both partners, it is good
f
Man-o-man !!! It took me a while to track this down this afternoon. If you
upgrading a CPA router, you'll need this piece of software.
All the best !!!
Phil
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=28018&t=28018
--
FAQ,
Not necessarily you can have a frame connection in an up/up state and not
transfer data can't you.
- Original Message -
From: "Gregg Malcolm"
To:
Sent: Sunday, December 02, 2001 12:01 PM
Subject: RE: Serial Line is up and line protocol is up ANSW [7:27930]
> Anil,
>
> I'm sorry, my
The following URLs should give you lots of ISDN installation and
troubleshooting advice. They are not necessarily in the order of preference.
http://www.cisco.com/warp/cpropub/45/ISDN_TS.htm
http://www.cisco.com/univercd/cc/td/doc/cisintwk/itg_v1/tr1917.htm#xtocid117
1410
http://www.ieng.com/ne
I have set up several of our staff with the Unity client (3.0.3) to
connect over the local cable company's @home network to our Pix 506.
The VPNs work fine, connect and traffic flows but in the middle of work
the tunnel drops and the message that your IPsec tunnel has been
terminated appears. Yo
That's a good question that I don't have an answer for but I can tell
you I have seen status of TEI assigned and it worked fine though in
general multiframe established gives me the warm fuzzy!
Dave
John Kale wrote:
>
> Hello all,
>
> on using the 'show isdn status'
>
> i get 3 lines for
Yup, up and up, you got LMI between you and the switch not an active
PVC.
Dave
Donald wrote:
>
> Not necessarily you can have a frame connection in an up/up state and not
> transfer data can't you.
>
> - Original Message -
> From: "Gregg Malcolm"
> To:
> Sent: Sunday, December 02, 20
I recently heard from a course instructor that Tacas+ was not available on
the 3005 VPN
concentrator. Is their any thruth to this? Is there any plan to support it
if they are
moving away from radius?
Brian Wilkins wrote:
> I spent the better part of a week trying this because, obviously, the p
Man-o-man !!! It took me a while to track this down this afternoon. If you
upgrading a CPA router, you'll need this piece of software.
http://www.cisco.com/cgi-bin/Software/Tablebuild/tablebuild.pl/rsl
All the best !!!
Phil
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=2
Hello Group!!
I just finished CIT today & finally a CCNP, Used Cisco press books for it.
Many thanks to this wonderful group. Special thanks to Ole Drews Jensen for
his Switching Commands software, which helped me with commands.
Thanks a lot,
God bless!!
ADIL
Message Posted at:
http://www
Multiple_frames_established is a good state. It's what you want to see.
TEI_assigned is a good intermediate state. It means that the terminal
endpoint identifier has been assigned, which is a good thing. But the state
should progress to multiple_frames_established, from what I understand.
On t
Configuring Sub-interfaces on a c1603
What could possibly go wrong??
It looked so easy in the book.
Does this mean I must use secondary IP addresses on the e0,
and sub-interfaces only on s0?
Eg.,
#int e0
ip address [i.p.address] [subnet.mask] secondary
#int s0.1
ip address [i.p.address] [subnet.ma
what i'm trying to say is that normally either multiple_frame_established or
tei_assigned is displayed but in this case i have the 2 displayed at the
same time like this
=multiple_frame_established
=tei_assigned
=tei_assigned
looks like a bug or something.
John.
>From: "Priscilla Oppenhei
i think baseline
- Original Message -
From: Mark Odette II
To:
Sent: Monday, December 03, 2001 12:16 PM
Subject: RE: CIT question [7:27964]
> I'm not sure what exactly it is, but the first thing that comes to mind is
> maybe an SNMP profile, or the level of Syslog to specify with log
Just want to let you all (or at all you in to Southern Califorina area) know
that we will be having our monthly Southern California Cisco Users Group
meeting this Thursday at Infonet in El Segundo.
This month we will be featuring a discussion panel. While this may not be
the usual techincal prese
Phil... I had to search the archives for that darned link too, but I finally
found it - it's the Router Software Loader (RSL), also known as the CiscoPro
upgrade tool
http://www.cisco.com/pcgi-bin/tablebuild.pl/rsl
(requires CCO login account)
- Original Message -
From: "Circusnuts"
T
If you bought from Ebay, you have their slow complaint process to help
(sorta :o) If you used PayPal, both you and the seller are verified, and
you used a credit card- you're covered. Rule of thumb though, escrow any
purchase you cannot afford to lose. I have purchased my entire lab off of
Ebay
Also, I strongly reccomend against buying big-ticket items from sellers that
are overseas. If you do, pay the extra to use an escrow service. I bid on
a 26xx from a chap on Ebay. The listing said he was in Germany. When I won
the auction, I got the actual contact info and he had registered the
Hi All,
Is anyone interested in buying into a shared CCIE Lab available over the
Net in Melbourne?
Lab is complete including Cat switches, ATM, VOIP, and lots of 3600 and
2500 routers.
Anyone interested and want diagrams etc email me off list.
Darren Ward
(PGradCS, CCIE #8245, MCP)
Message
Ok, I guess I need to explain my question in other words. If you are at the
console of route A, can you upload a config file from router A to Router B?
Thanks
John Tafasi
""Nicolas FEVRIER"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > "TFTP does not provide any security for
Folks,
I was reading the article about IPSec and thought some of u might enlighten
my doubts. As we know IETF had split the IPsec into 2 parts namely Ipsec and
IKE.
1)Since IPsec(Ah or ESP)can provide all the Encryption,Authentication and
intergrity,do we still need a IKE for creating Encrpytio
I am looking for a CCNP/CCDP study group in Stamford CT or somewhere in
lower Fairfield county. If there isn't one locally I would be interested in
forming one. Please email me if you are interested.
[EMAIL PROTECTED]
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=28038&t=28
Group,
I am having problems with my xyplex server. I have forgot the port
parameter for carriage return. When I type reload, I can't type confirm.
My xyplex simply goes to the next line. Is there source documentation on
the web ?
(xyplex is the poor man terminal server. Some of us can't afford a
I wanted to thank everyone who helped me focus and pass the CID exam.
Specifically, Jim Walker and Scott Nawalaniec! Thanks for your
encouragement and direction in the areas to zero in on.
This test is a bruiser! But with perseverance you can get by it too!
Darren
x$:0`0:$xx$:0`0:$xx
Congratulations Adil,
I'm glad my sw helped you out.
Ole
Ole Drews Jensen
Systems Network Manager
CCNP, MCSE, MCP+I
RWR Enterprises, Inc.
[EMAIL PROTECTED]
http://www.RouterChief.com
NEED A JOB ???
http://www.oled
Dear All,
Need some advice on the redundancy features of CallManager. One of my
customers is asking about the redundancy features of CM - he is thinking of
putting 2 CM servers at a main site providing local server redundancy,
however, there will be a third CM server at a remote site which provid
It pays to do research before you bid. If it's the first time you've bought
on eBay, consider it a lesson. I look at the seller's feedback before I bid
now, and also know of a few reputable folks that I *prefer* to do business
with when they're selling an item. and a few that I *avoid* when buyi
Setup one as Publisher and the other one as Subscriber.
You can get manuals from Cisco CCO.
""Paul Beckman"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I was wondering the best way to make a call manager redundant. We have
two
> servers but if one goes down then the phones
72 matches
Mail list logo
