One thing to remember if you do the etherchannel for this customer is
the src/dst mac pairs and their respective flows may not be diverse
enough to offer good load balancing. This is the case for most router
to router subnets such as in customer hand-offs like you seem to have.
Yes some of the
Those values came from Caslow. I don't have mine at hand right now, so can't
give you the exact page number. I believe it is under the Redistribution
section though. I will try and locate my Caslow, and email you the page
number.
CM
- Original Message -
From: Kane, Christopher A.
Depends. Not normally a good sign, but can be various reasons for them.
Number of resets has to be relative to the period. If it's over a long
period it's probably nothing.
I had a customer recently saying that interface resets were high. Got the
show interface and the interface counters had not
test
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=33280t=33280
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
our company have two subnet need to go to internet. however, just one FE
internal interface is availible, one is dmz and one is for internet.
Since one FE interface can't bound two different subnet. Two subnet can't go
to internet at the same time.
Would anyone know how to solve the problem?
WW wrote:
Since one FE interface can't bound two different subnet. Two subnet can't
go
to internet at the same time.
Would anyone know how to solve the problem?
PIX != router.
Which gives you the answer as well: use something in front of the PIX
that is.
Regards,
Hi,
Could anyone tell me which I should buy for a CCNP home lab, a Cisco 1912-EN
or a 2950 XL EN. Or would you recommend something else ?
Thanks,
Graham.
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=33283t=33283
--
FAQ,
If your company already has two subnets, what are you using to route between
them already? Connect your pix inside interface to one of the subnets
directly and route to the other one as you do now.
Gaz
WW wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
our company have two
According to Laura Chappel's book on troubleshooting, the interface is reset
(which is usually token ring) is a physical hardware problem
Rich
norsyam ariffin wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
Hi guys,
Could somebody explain what is the meaning of interface
Thanks for the responses so far. One more variation to this question.
What if there was an application on my network that instead of blocking,
I wanted to control the amount of bandwidth it consumed. One might
define an ACL to identify the traffic by L4 port and map this traffic to
a
Dear Group,
I passed the CID montser yesterday the very tough exam i had ever seen
harder the the Win2k 4 hours accelerated But i managed to pass it.
Can anyone guide me what are the exams needed for CCNP security
specialization, I recently installed a firewall and also vpn through that
After booting, at the console we got the rommon# 1 prompt, and error
messages that the image decompression had failed, invalid format, blah
blah blah. Everything had been working fine for a couple of months, then
this, just as this beast is to go into production. We tried to install
new IOS
Ditto on the no VLAN policy inquiry...
But as far as answering your question, I think that you may be SOL as far as
aggregation goes...
You may not be able to aggregate, but you can use CEF per-packet LB in order
to solve the problem of needing more bandwidth...
- Original Message -
It's the number of times an interface has been completely reset. This can
happen if packets queued for transmission were not sent within several
seconds. On a serial line, this can be caused by a malfunctioning modem that
is not supplying the transmit clock signal, or by a cable problem. If the
Does anyone have experience with or information on the NSG ISDN-BRI
2-144EA? I am considering buying one, but I can't find any information on
it. It looks a lot like a Merge 2000, so I'm wondering whether it is the
same instrument, but branded by NSG. Can't find anything on the NSG Data
web
Hi ,
I wanted to know what would be the ideal modules to purchase for a
catalyst 5000 with the software version for the purpose of setting up a
CCIE lab for preparation .
Would the Supervisor engine 1 do , or would it be advisable to go for
SUP 2 .
I have heard that this switch is
Hi All
I am desperately looking for a custom upgrade for the Cat 5000 Switch
Supervisor Engine 1. I cannot upgrade the software without it. Can anybody
help me out here or even the cheapest place to get on. I am trying to get
this
for my home lab. The Product number is MSM-C5K-16M-Custom=
On Fri, 25 Jan 2002, John Neiberger wrote:
Also, what IOS are these routers using? There are some versions of IOS
with a LOT of ISDN-related bugs.
I often see routers (generally 801s and 1003s) using basic-net3 that won't
bring up layer one or get stuck in TEI_ASSIGNED until a call is placed
You will need a token ring media filter which has a DB9 connector on one
end, and an RJ-45 connector on the other. The media filter basically
filters out noise on UTP cables. A picture of one is listed in the link
below.
http://www.pulsewan.com/rad/mf3.htm
Hope this helps,
Joseph J. Slawinski
Found this link while looking for something else. Hope this helps;
http://www.cisco.com/warp/customer/534/21.html
Kelsey Miller wrote:
Hello All,
I've been searching for the acceptable amount of Db loss for
multimode fiber
run. I've found a variety of information on core diameter,
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
WW
Sent: Saturday, January 26, 2002 7:51 AM
To: [EMAIL PROTECTED]
Subject: PIX [7:33281]
our company have two subnet need to go to internet. however, just one FE
internal interface is availible, one is
1912 should be plenty for a CCNP lab. a 2950 would be nice, but I think
that would be overkill and there are better uses of your study funds then
to waste it on that switch.
thanks,
-Brad Ellis
CCIE#5796 (RS / Security)
Network Learning Inc
[EMAIL PROTECTED]
used Cisco gear: www.optsys.net
thank you , looks useful
can I still use the other WIC port to run another link
if that WIC port is not the one on the NM-2W but the
one that comes with the 2600 chasis
regards,
suaveguru
--- Woods, Randall, SOBUS
wrote:
check it
The WIC-2T provides two serial ports using the Smart
hi,everybody.
My envirment is:
the outside interface of pix 525 is connected to the fibre-ethernet
transceiver ,no router availble, and the dmz interface of the pix is
connected to several severs like www,dns,etc. The inside interface is
connected to the lan, no proxy availble.
When I finished my
You guys may want to ask this on the CCIE Security list as well :-)
http://www.groupstudy.com/list/security.html
Paul
Gaz wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
Can't see anything wrong. Have you done a 'clear xlate', and if necessary a
reboot?
Otherwise can't see
Derek- is this the odd memory upgrade for the early Sup1s? if so, I *may*
have one around here.. let me know before I tear the office apart :)
MikeS
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=33300t=33294
--
FAQ, list
One more time-- //www.cisco.com/warp/public/110/19b.html
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Glenn Johnson
Sent: Saturday, January 26, 2002 1:33 PM
To: [EMAIL PROTECTED]
Subject: RE: PIX [7:33281]
-Original Message-
From: [EMAIL
I found it :) right on top of the piles
Anyways.. the kit I have is for Supervisor cards models 73-1414-01 to
73-1414-08 ONLY. this is custom SIMM that is needed for softwaare upgrades
from 2.1
The actual kit number is MEM-C5K-4M-V21
let me know if this is what you need
MikeS
Message
Found this on Cisco site:
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat5000/c5krn/sw_rns/78_3829.htm
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=33303t=33294
--
FAQ, list archives, and subscription info:
I am having a problem I know most of you folks could help me with. I have
two 2502 routers and two token ring hubs. The hubs are dumb hubs, they
have no network management capabilities. They don't even have external
power supplies.
The problem is I am able to hook up my computers to the hubs,
At 09:39 AM 1/26/02, bergenpeak wrote:
Thanks for the responses so far. One more variation to this question.
What if there was an application on my network that instead of blocking,
I wanted to control the amount of bandwidth it consumed. One might
define an ACL to identify the traffic by L4
Hi all,
I'm after some ideas if you'd be so kind :-)
A 2Mb link being used mainly for streaming media has about 15 potential
users. The task is to limit the number of users at any one time to four, so
they have half a Mb each (ish).
My initial idea, which I must admit, I dont think is such a
Larn to do it the proper way thru TFTP, console and telnet.
Solves all the runmaybesomtime errors
Oz
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=33307t=33272
--
FAQ, list archives, and subscription info:
Have try using nat/pat to allow both subnets in the inside interface access
to the internet? eg
#nat (inside) 1 0 0
#global(outside) 1 216.72.201.1
Will allow all inside users to initiat an outbound connection to the
internet using the public address 216.72.201.1 ie PAT.
Regards.
Oletu
-
Have you checked the ring speed?
CM
- Original Message -
From: Joseph Slawinski
To:
Sent: Saturday, January 26, 2002 8:26 PM
Subject: Router problem inserting into token ring [7:33304]
I am having a problem I know most of you folks could help me with. I have
two 2502 routers and
Is it H.323 media? Then you could set up a gatekeeper, and limit to 4
connections. Or, if you know the size of the bandwidth stream, you could
create a PQ in LLQ that will only let enough bw for 4 users, then the rest
wouldn't go through.
Gaz wrote in message
[EMAIL PROTECTED]">news:[EMAIL
If all of my responses get through this will be embarassing.
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=33318t=33306
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and
Is the ring completed on the MAU, IE do you have a patch lead in the RI RO
to complete the ring?
I had a similar issue using a MAU which had a similar description as yours,
I sused it finally...used one patch lead in RI RO...Bingo it all works.
As Charlles said make sure there both either 4
Hi Gang,
Is there such a thing as an eval copy...I'd like to know what this thing
looks like since I've heard/read so much about. Alos is there an eval copy
for Cisco Works for Windows?
All the best,
Jon Mian
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=33321t=33321
I have checked the ring speed, its the same on the token ring cards and the
router. The hub doesn't have a setting for ring speed though.
Author: Charles Manafa (---.blueyonder.co.uk)
Date: 01-26-02 17:26
Have you checked the ring speed?
CM
- Original Message -
From: Joseph
That would be my first guess, you can shut down a ring by mixing speeds on a
MAU. Can 2 PC's see each other? On the rings that I've worked on, once a PC
entered the ring the light stays on so I would question the 15 second blink.
Also check the duplex settings. (sorry couldn't resist)
-
book seems to be pretty decent, but I have to admit, Ali is right. The
manual that
comes with a 515 is pretty good at getting right into what you need. Not
very hard to
read and has good examples. The Chapman book is a lot like the manual.
bk
sam sneed wrote:
Has anyone read the Cisco
The MAU's speed cannot be changed, so I am guessing this is controlled
between the token ring cards and the router, (they have to negotiate
together). The 15 second blinking of the port light on the MAU is only when
one PC is attached. I used this as an indicator to prove that the ports
were
Try the troubleshooting techniques from Cisco -
http://www.cisco.com/univercd/cc/td/doc/cisintwk/itg_v1/index.htm
select Token-Ring and follow the instructions!
If that doesn't give you any luck then turn on debug and check the status
of the interface...
Also if you have CCO then dump the
I must admit I've not even touched on streaming media, H323, but apparently
it's just RealPlayer 8.5 anyway.
Your suggestions have led me to RSVP at the moment, so I have some reading
to do.
Thanks for idea's. Feel free to keep em coming. I'm off to get some reading
done.
Cheers,
Gaz
Steven A.
Are you running 4Mb or 16? Make sure all speeds are all the same.
Are you plugging the routers into Ring-In or Ring-Out? (That's a no-no)
You say the lights light up every 15 seconds. Does this mean they are only
on for a few seconds?
Joseph Slawinski 01/26/02 02:26PM
I am having a
Somebody knows how to do DNS doctoring on PIX
I have the DNS on DMZ with static and the clients workstations are on
inside interface.
Dante
This email has been scanned for all viruses by the MessageLabs service.
Is it true :Traffic is ALWAYS allowed between from a higher security
interface to a lower security interface without doing anything special?
If it is true,can I ping from the inside or dmz to outside without the
configuring of the access-list icmp any any?
Message Posted at:
ada
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=4t=4
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
It is possible that the MAUs are defective. Substitution is a good
troubleshooting step. Do you know anyone who does have TR working? If so,
substitute your MAU for theirs and see if it works for them. Try their MAU
with your routers.
-Original Message-
From: Joseph Slawinski
Its possible on many platforms to tftp download from the rom monitor. If
you have physical access and a laptop with ether, you are be back on the
air pretty fast.
Sounds like you talked with the TAC, and they should have told you if
this was an option on your platform, but
Jason
Going to get heck for this.. but here goes..
Ciscoworks has some cool features and maybe with a gadzillion routers it
would help but if you have say 20 or so routers you do most of the Cisco
works stuff with free and share ware.
IF you have a CCO account you can get demo of some stuff or you can
Nortel products unstable noo heh
Kinda funny as shasta is a generic soda pop in the states and does make you
burp a lot..
kinda fitting I guess
Oz
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=8t=33262
--
FAQ, list
No, though the PIX allow traffic from a higher security interface to a lower
one, you cannot ping the dmz interface from the inside interface
successfully because the echo-reply (response from the dmz interface) will
be disallowed from entering the inside interface, so you will end up having
Gaz,
I tried to renumber my subnet to 10.0.1.0, 10.0.2.0 and 10.0.3.0 (mask
255.255.255.0) with those statements below and no luck. I received a
suggestion to enable rfc1483 bridging. That did work, but then I lost my
internet connection since I am in PPP mode for IP assignment. Any other
Oz,
Could you elaborate on what packages you are talking about? I would like to
try a few to see how they work.
I only have a couple of routers to play with learning to use the the
different tools helps me learn the technology :^)
Thanks,
-Joe-
Ozzie Sutcliffe wrote in message
[EMAIL
Hi,
It really depends on what you want to do or implement for the DNS. The DNS
guard on PIX is enabled by default and it cannot be disabled not configured.
It help to prevent against DoS attacks by tearing down the UDP conduit on
the PIX firewall as soon as the DNS response is received not
It's on my to do list ..
Which has a to do list of it's own..
I will be busy this weekend cabling up my lab and coaxing an old MGS back to
life. And getting ready for a 2 week road trip .
So maybe during the week if the beer is lousy in a bar I will put together
a list of stuff..
So look next
Workstations should be in the highest security NIC therefore should be
able to connect to the DNS servers on a DMZ with no doctoring. In some
cases people use an alias to translate the internal IP of the DNS server to
the external for users inside the firewall trying to reach the DNS server.
If
On Jun 14, 2:36pm, Tom Lisa wrote:
}
} I've had that problem with my CCNA students. With a little effort it is
} quite easy to
} put a DB60 on upside down (even though I labled them this side up). The
When it is upside down they can't see the this side up label, so
you need to put a this
From: Darrell Newcomb
X-GroupStudy-Version: 3.1.1a
X-GroupStudy: Network Technical
To: [EMAIL PROTECTED]
Subject: Re: Stupid Question [7:32591]
Sender: [EMAIL PROTECTED]
Reply-To: Darrell Newcomb
Precedence: bulk
With the key NT cheap shot being:
It doesn't matter how coherent the file
Whats the best book for CCNP Routing exam ?
RTING 640-503
looking to sit the exam and need a good study guide
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=33350t=33350
--
FAQ, list archives, and subscription info:
62 matches
Mail list logo
