RE: 6509 switch [7:31251]

2002-01-09 Thread Keyur Shah
Set port speed and duplex manually rather than leaving it to auto negotiate. This is very common problem on all cisco switches. -Keyur Shah- CCIE# 4799 (Security; Routing and Switching) css1,ccna,ccda,scsa,scna,mct,mcse,mcp+i,mcp,cni,mcne,cne,cna Hello Computers "Say Hello to Your Future!" http:/

RE: PIX with no NAT [7:31353]

2002-01-09 Thread Keyur Shah
You still need conduit or access list to bypass PIX ASA. -Keyur Shah- CCIE# 4799 (Security; Routing and Switching) css1,ccna,ccda,scsa,scna,mct,mcse,mcp+i,mcp,cni,mcne,cne,cna Hello Computers "Say Hello to Your Future!" http://www.hellocomputers.com Toll-Free: 1.877.794.3556 Fremont: 510.795.681

RE: PPP link negotiation problem [7:31132]

2002-01-09 Thread Stefan Dozier
I agree! From what I've read, that's not how it's suppose to work! This link came through the list recently! http://www.cisco.com/warp/public/131/ppp_callin_hostname.html I'm not sure if you've seen it or not, if you have, I apologize for not reading the entire thread! If you haven'tcheck

Re: Frame-Relay Question [7:31395]

2002-01-09 Thread MADMAN
Only if you adding channels to a frac T1 but nothing for a CIR change. Dave James wrote: > > Hello, > > This might be a simple/rehashed question. I appreciate > any feedback from anyone who can comment on this.. > If you were to order a higher guaranteed rate /port > speed on an existing fra

RE: Cisco security books [7:31393]

2002-01-09 Thread Keyur Shah
Also, Andrew Mason's Cisco Secure Internet Security Solutions is very very good reference book for MCNS and CCIE Security. -Keyur Shah- CCIE# 4799 (Security; Routing and Switching) css1,ccna,ccda,scsa,scna,mct,mcse,mcp+i,mcp,cni,mcne,cne,cna Hello Computers "Say Hello to Your Future!" http://www.

RE: Frame-Relay Question [7:31395]

2002-01-09 Thread Bill Carter
No. The CSU still runs with the T-1 configuration. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of James Sent: Wednesday, January 09, 2002 9:55 AM To: [EMAIL PROTECTED] Subject: Frame-Relay Question [7:31395] Hello, This might be a simple/rehashed que

Re: IP Packet options [7:31364]

2002-01-09 Thread Howard C. Berkowitz
>The best source is the IPv4 standard RFC 791: > >"The Options provide for control functions needed or useful in some > situations but unnecessary for the most common communications. The > options include provisions for timestamps, security, and special > routingThe options may appear o

Re: AS 5300 [7:31394]

2002-01-09 Thread MADMAN
Absolutely, there are plenty of examples on CCO but for a small bribe I can give you a working config ;) Dave Amit Bhasin wrote: > > Hi all, > i need to know whether we can configure Even PRI on Cisco AS 5300 RAS and use > it for ISDN and analog Dial-Up users simentaniously.If yes can anyone

RE: Cisco security books [7:31393]

2002-01-09 Thread Bill Carter
"Managing Cisco Network Security" is good and worth the money. Haven't read the other book yet. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 09, 2002 9:39 AM To: [EMAIL PROTECTED] Subject: Cisco security books [7:31393] Does anyone have

Re: How Can the Catalyst 6500 Support Token Ring and Ethernet? [7:31404]

2002-01-09 Thread MADMAN
No, the 6500 doesn't support toker ring thank God :) (or ATM LANE!!) Dave Picciani Francesco Saverio wrote: > > I have a Catalyst 6500. I want have an ethernet VLAN and a Token Ring VLAN > on the same Catalyst. > Is this possible? > > Thanks!! -- David Madland Sr. Network Engineer CCIE

RE: help on acl setup [7:31336]

2002-01-09 Thread Mark Morenz
access-list # deny [any ip ending with the last bit as a "1"] and a wildcard mask of 255.255.255.254 should work. It's like cat-juggling...I've heard of this sort of thing taking place, but I've never seen it actually happen :) So, I'll defer to anyone out there who has done it. :-{)] Mark A. M

RE: Frame-Relay Question [7:31395]

2002-01-09 Thread Ole Drews Jensen
Yes, On the CSU you will have to tell it how many channels it is using. If you currently have 256 kbps, the CSU will have 4 channels (4x64kbps=256kbps) assigned to the Frame Relay connection. If you wish to expand your connection to 384 kbps, you will need to assign 6 channels instead of 4. If t

OSPF Question... [7:31402]

2002-01-09 Thread Scott Riley
Hi guys, Hoping to pick someone's brain about this issue that we're seeing: We have two 6509 Cat switches with a Gig trunk and RSM's. Multiple VLAN's are configured on the RSM and we are running OSPF (area 0). The problem we have is that the two 6509's are forming OSPF adjacancies with each ot

Re: Load on Serial interface. [7:31400]

2002-01-09 Thread Steven A. Ridder
about 1.75Mbps. If you take 10/255=3.9% take 45Mbps (total speed of T3)* 3.9% and you get the approx answer of 1.75 Mbps. -- RFC 1149 Compliant. FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTEC

Load on Serial interface. [7:31400]

2002-01-09 Thread NK Sat
Do we have any links or writeup to understand how the load 10/255 txload and rxload are calculated in the "show interface serial " command i wanna understand what 10/255 means on a T3. Thanks _ Send and receive Hotmail on you

RE: SNMP Community String [7:31373]

2002-01-09 Thread Dion, Thierry
SNMPv3-Version 3 of the Simple Network Management Protocol. SNMPv3 is an interoperable standards-based protocol defined in RFCs 2273-2275. SNMPv3 provides secure access to devices by a combination of authenticating and encrypting packets over the network. The security features provided in SNMPv

Re: Frame-Relay Question [7:31395]

2002-01-09 Thread Steven A. Ridder
You need to config the CSU/DSU or service-mod to utilize the correct number of channels on the port, regardless of CIR. ELMI or traffic-shaping is used to shape CIR speed. SO if you orderd a full T1, but only had a 64K circuit (I hope you are using the other channels for voice or something) you

Frame-Relay Question [7:31395]

2002-01-09 Thread James
Hello, This might be a simple/rehashed question. I appreciate any feedback from anyone who can comment on this.. If you were to order a higher guaranteed rate /port speed on an existing frame-relay connection, for example a t1 frame-relay, will there be any configurations needed on the router or

AS 5300 [7:31394]

2002-01-09 Thread Amit Bhasin
Hi all, i need to know whether we can configure Even PRI on Cisco AS 5300 RAS and use it for ISDN and analog Dial-Up users simentaniously.If yes can anyone tell me what will be the configartion commands for as such. Regards, Amit Bhasin Message Posted at: http://www.groupstudy.com/form/read.p

Cisco security books [7:31393]

2002-01-09 Thread Doug Korell
Does anyone have input on good overall Cisco security books? I saw two books on Cisco's website called "Designing Network Security" and "Managing Cisco Network Security". Anyone have an opinion on these? Thanks. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31393&t=31393 -

RE: SNMP Community String [7:31373]

2002-01-09 Thread Andras Bellak
Try using snmpv3 -Original Message- From: Andrew Larkins [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 09, 2002 5:53 AM To: [EMAIL PROTECTED] Subject: RE: SNMP Community String [7:31373] Not to sure about that, but you can add access lists to control who is allowed to use those SN

Re: IP Packet options [7:31364]

2002-01-09 Thread Steven A. Ridder
As far as cisco, I can't imagine being able to filet on options type. I can only think of the following examples to classfiy/filer on: dscp ip prec/tos cos input int SA DA access-group mpls or or protocol as defined in NBAR -- RFC 1149 Compliant. FAQ, list archives, and subscription info: ht

Re: PPP link negotiation problem [7:31132]

2002-01-09 Thread bergenpeak
Thanks for the responses so far. I still don't understand the purpose of the "ppp chap hostname" command under the interface config. Using this command, I am now able to get a PPP link up. But I must do the following: rtr-a config: username rtr-b int serial 0

Re: IP Packet options [7:31364]

2002-01-09 Thread Dr Rita Puzmanova
The best source is the IPv4 standard RFC 791: "The Options provide for control functions needed or useful in some situations but unnecessary for the most common communications. The options include provisions for timestamps, security, and special routingThe options may appear or not in

Re: How is this book ? [7:31382]

2002-01-09 Thread David L. Blair
I heard that 1st edition is full of errors. Do not know about the 2nd edition. -- "Through Complexity there is Simplicity, Through Simplicity there is Complexity" David L. Blair - CCNP, CCNA, MCSE, CBE, A+, 3Wizard ""Mahisri"" wrote in message [EMAIL PROTEC

Re: ATM subinterface with NAT [7:31361]

2002-01-09 Thread MADMAN
inter a1/0 ip nat outside/inside Dave "Elaluf, Sylvia," wrote: > > Hi All, > What are the guidelines to configure NAT with ATM in a 7200? > Is this possible? > The ATM interface is connected to an ATM switch using a STM-1 link. > Thanks > > Silvia -- David Madland Sr. Network Engineer CCIE

How Can the Catalyst 6500 Support Token Ring and Ethernet? [7:31385]

2002-01-09 Thread Picciani Francesco Saverio
I have a Catalyst 6500. I want have an ethernet VLAN and a Token Ring VLAN on the same Catalyst. Is this possible? Thanks!! Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31385&t=31385 -- FAQ, list archives, and subscription in

Re: Routing Exam 503 [7:31275]

2002-01-09 Thread David L. Blair
I used the following to pass all my Cisco tests: Boson practice test #1 for Exam 640-5xx $39.95 CiscoPress Certification Guide for Exam 640-5xx (Comes with electronic practice test) $60.00 can find for $40.00 or less is used CiscoPress Course Guide for Exam 640-5xx (Great background knowledge) $

How is this book ? [7:31382]

2002-01-09 Thread Mahisri
How is this book ? Cisco CCIE All-in-One Study Guide Paperback, 1999 Roosevelt Giles Condition: Like New Price: $19.39 (Save $60.59!) Seller: EducationalBook Thanks in advance for the feedback Sri Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31382&t=31382 ---

RE: Routing Exam 503 [7:31275]

2002-01-09 Thread Brian Zeitz
The BSCN book you recommend, is that from the Prep Kit? Yes, now that I read the reviews on the cert kit on Amazon, amost every post complains that the books are chock full of errors. Maybe that's why its 96$ for 4 books, ha ha. I am hesitant to get it, maybe I can just borrow a friends book for a

Re: IGRP Subnet mask issues [7:31349]

2002-01-09 Thread Engelhard M. Labiro
Hi Aamer, This is another solution without static routes. The idea is still the same, break 10.0.0.0/24 to smaller /30 networks to fit with the interface of IGRP domain (10.3.255.8/30), using "summary-address" at OSPF. r2#sh run router ospf 1 summary-address 10.0.0.0 255.255.255.252 summary-ad

RE: SNMP Community String [7:31373]

2002-01-09 Thread Andrew Larkins
Not to sure about that, but you can add access lists to control who is allowed to use those SNMP strings snmp-server community abcd rw 50 access-list 50 permit 1.2.3.4 0.0.0.255 -Original Message- From: Kwame [mailto:[EMAIL PROTECTED]] Sent: 09 January 2002 15:04 PM To: [EMAIL PROTECTED]

Re: Sniffers [7:31377]

2002-01-09 Thread Jonathan Kephart
I have to chirp in and add that I too would recommend Network Associates SnifferPro. I work in a TRC for a switch/router vender and use different sniffers on an almost daily basis. SnifferPro is good because it has an intuitive interface, and excellent filtering capabilities. It is also cross p

Re: SNMP Community String [7:31373]

2002-01-09 Thread Raul F. Fernandez-IGLOU
Just access-list it. - Original Message - From: "Kwame" To: Sent: Wednesday, January 09, 2002 8:03 AM Subject: SNMP Community String [7:31373] > Is there a way to encrypt the snmp community strings? The strings are > security holes since there are tools out there (I know of at least o

RE: IOS Dilemma "Wrong Software for Hardware" [7:31370]

2002-01-09 Thread Andrew Larkins
If this is a CA, white coloured router, then you need to do a cookie upgrade using the router software loader -Original Message- From: Brad Ellis [mailto:[EMAIL PROTECTED]] Sent: 09 January 2002 14:52 PM To: [EMAIL PROTECTED] Subject: Re: IOS Dilemma "Wrong Software for Hardware" [7:31370]

Re: Connection refused by remote host [7:31360]

2002-01-09 Thread Jason
Set the privelege level for the clear line command of course no exec also helps ""Edward Chuchaisri"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Guys, > > I have an old terminal server CS-500 and I constantly get the Connection > refused by remote host error message

SNMP Community String [7:31373]

2002-01-09 Thread Kwame
Is there a way to encrypt the snmp community strings? The strings are security holes since there are tools out there (I know of at least one) capable of deriving the RW strings, given the RO strings. Once the RW strings are known, you can download the config files and hack the passwords although

Re: IOS Dilemma "Wrong Software for Hardware" [7:31370]

2002-01-09 Thread Brad Ellis
What color router is it? Is it a CPA2511 (is the router white)? thanks, -Brad Ellis CCIE#5796 (R&S / Security) Network Learning Inc [EMAIL PROTECTED] ""Oliver Nadalin"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi Guys, > > Have a c2511 with the above message during bootu

IOS Dilemma "Wrong Software for Hardware" [7:31370]

2002-01-09 Thread Oliver Nadalin
Hi Guys, Have a c2511 with the above message during bootup - the best i can do is get to basic ROM mode. I've changed the conf reg 's but to no avail...how can i get the right software on this thing? Thanks. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31370&t=31370 -

Re: PIX with no NAT [7:31353]

2002-01-09 Thread Ocsic
may be you can use for example internal network: 192.168.1.x / 24 external network: 200.100.100.X /24 you can use this static command static 192.168.1.0 192.168.1.0 netmask 255.255.255.0 0 0 access-list OUT permit ip any any access-list IN permit ip X.X.X.X any access-group OUT interface insi

Re: Call Manager 3.1 [7:31335]

2002-01-09 Thread Steven A. Ridder
IBM and Dell models are are supported also. I was talking to someone one time about why they have such a restrictive policy, and they said they were getting more PC support calls then CallMannager issues, so they just locked down a few servers that they know could handle the software. ""Engelh

Re: Connection refused by remote host [7:31360]

2002-01-09 Thread Lan Wong
I have this happened to me on the 2511. All I need to do was add no exec and modem host to the term server. If you connect to a 2924xl switch, the reverse telnet would not work with the modem host command. Check this out. http://www.cisco.com/warp/public/793/access_dial/comm_server.html >From

Re: IGRP Subnet mask issues [7:31349]

2002-01-09 Thread Aamer Kaleem
want to do it without static routes.thats a restriction Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31366&t=31349 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and

Re: IGRP Subnet mask issues [7:31349]

2002-01-09 Thread Engelhard M. Labiro
Without changing the interface subnetmask to /24, break 10.0.0.0/24 to several /30 networks (10.0.0.0/30 to 10.0.0.252/30) , make a static route for each /30 network to the interface connecting 10.0.0.0/24, and redistribute those static routes to IGRP domain. This kind of solution is defined at C

IP Packet options [7:31364]

2002-01-09 Thread Aamer Kaleem
Can anyone shed some light on "Options" in the IP Packet. On CCO, it is said that they can used for security etc. Also how can we filter packets based on "option types". Thanx, Aamer kaleem Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31364&t=31364 -

Yah !!!!!!!!!!!!!! CCNP @ last [7:31362]

2002-01-09 Thread Johnny McKenzie
It's been 2 years from " I think I'll get my CCNA" To " Cool, meamingful letters after my Name" Just got through on CIT ( what a dog ) But I was right to do it last, If you're done the other papers you can skim through the chapters explaining the technologies and concentrate on the trouble shoo

ATM subinterface with NAT [7:31361]

2002-01-09 Thread Elaluf, Sylvia,
Hi All, What are the guidelines to configure NAT with ATM in a 7200? Is this possible? The ATM interface is connected to an ATM switch using a STM-1 link. Thanks Silvia Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31361&t=31361 -

Connection refused by remote host [7:31360]

2002-01-09 Thread Edward Chuchaisri
Guys, I have an old terminal server CS-500 and I constantly get the Connection refused by remote host error message when I tried to connect to the terminal line. I have the privelege access so I can clear line x and it will work but what about the other users who don't have the privelege access?

highband access [7:31359]

2002-01-09 Thread [EMAIL PROTECTED]
Hallo group, I am looking for a solution for highbandwidth Internet/VPN access. I target video/audio stream. My first thoughts where for DSL and cable providers. Do you happen to know other good solutions ? (price is not very important, but reliability, performance, scalability) Thank a lot,

<    1   2