Re: ISDN problems... [7:34324]

2002-02-05 Thread Patrick Donlon
Stuart 180 seconds is normal, it depends if you have a minimum call charge from your telco. To see what causing the interface to dial use the debug dialer command: debug dialer [events | packets] - Displays DDR debugging information about the packets received on a dialer interface. Some more info

RE: Where to place the loopback in an ospf environment [7:34445]

2002-02-05 Thread McCallum, Robert
and if it doesn't tell you then DO NOT place the loopbacks into area 0 unless you find you may have to later on!!! Loopbacks as a general guide should never be placed into area 0 if it can be helped. -Original Message- From: Chuck Larrieu [mailto:[EMAIL PROTECTED]] Sent: 05 February 2002

RE: logging the access on a router [7:34346]

2002-02-05 Thread Dion, Thierry
Hello vincent is not exactly this form cause U have only the last login user viewing by sho run. I would like to se all user's connexions on the router. james at 00:05:35 Wed Nov 22 2000 steve at 00:07:05 Wed Nov 22 2000 Francis at 00:13:09 Wed Nov 22 2000 -Message d'origine- De :

RE: Where to place the loopback in an ospf environ [7:34445]

2002-02-05 Thread Richard Botham
Rob, Very interesting. I have my lab in 4 weeks too in Brussels. Is there anywhere on CCO that details anything to do with this and why loopbacks should not be used in Area0. ?Is this OSPF Specific or LAB specific? I'll try and think about this today and see if I can figure out why. Richard

Re: MAJOR OT: Free CCNPtraining for convicts [7:34039]

2002-02-05 Thread steve skinner
Errmmm... i wasn`t trying to start a flame war.and i appologise for introducing this to the list... MY BAD in responce to my own email... the point i was trying to get across..is this CISCOthere are other memebers of society who would benefit from this training just as much

4000 Series switch [7:34449]

2002-02-05 Thread Nisus
First of all I would like to thank you who replied to my questions about VLans and how to set them up. Second. In the information I have been reading about VLans usually 2 classes of switches are referenced. The first being a lower model or switch 1900 series. The Vlan setup is mostly menu driv

PIX activation key [7:34450]

2002-02-05 Thread Radford Dion
I've just got a hold of a PIX 515UR and I want to upgrade to the lastest software, but when I do a show ver there is no activation key. Is this normal, or do I have to obtain one from somewhere? Dion Radford Mellon Site Services - Europe 71 Queen Victoria Street, London, EC4V 4DR +44 (0) 20 76

Re: PIX activation key [7:34450]

2002-02-05 Thread Pat Donlon
You need to get it from your supplier and enter it when you install your software, see below, this is an upgrade I did (I didn't install it this time though), you get prompted to install after you stick the image on the pix .

RE: Traffic type monitoring [7:34382]

2002-02-05 Thread Ian Henderson
On Mon, 4 Feb 2002, Sam Deckert wrote: > by monitoring, i mean by protocol and possibly port..sorry, should have > been more specific. Hi Sam (hooray for more Australians :)), Netflow sounds like what you're after. On the ingres interface you want to monitor, add 'ip route-cache flow'. Now

RE: PIX activation key [7:34450]

2002-02-05 Thread Rik Guyler
Well, I've seen an "R" version and a "U" version but never a "UR" version. I have always been under the assumption that they were mutually exclusive. As for the lack of an activation key, that is odd. What is the current version of the OS? Have you tried to run an upgrade? When you apply for a

RE: 4000 Series switch [7:34449]

2002-02-05 Thread Rik Guyler
The 4000 uses a very similar CLI to the 5000. The 4000 series is much newer so some of the features are different plus the 5000 was considered a core switch and the 4000 a closet switch. However, the 4000 is coming out of the closet and some cool new features are being released such as Layer 3 s

Re: PIX activation key [7:34450]

2002-02-05 Thread Gaz
If you're not changing the features, then you won't need to put a new activation key in. If you are changing the features then you will have a new activation key, so you don't need the existing one. I used to cut and paste the activation key all the time "just in case" but never used it. I seem to

Re: Long....RE: CCIE starting pay [7:33899]

2002-02-05 Thread nrf
If I may ask, why exactly is it a good thing that people can pass the lab with just books, lab gear, and groupstudy, without ever having touched a production network in his life? This kind of thing is precisely the enabler of all these lab-rat CCIE's that are starting to seriously water down the

RE: PIX activation key [7:34450]

2002-02-05 Thread Radford Dion
Thanks everyone for the replies. I upgraded it without any problems, and a new activation key was generated automatically. I just thought it was strange that it didn't have a key straight out of the box. > -Original Message- > From: Gaz [SMTP:[EMAIL PROTECTED]] > Sent: Tuesday, February

Re: PIX activation key [7:34450]

2002-02-05 Thread Tom Martin
Dion, On the PIX 515 that we have, the activation key is listed directly under the serial number of the "sh ver" (the very last line). Perhaps you are running really old PIX code??? In the past I have successfully obtained the correct serial number by applying for the IPSec upgrade license for

RE: OSPF DR problem [7:34379]

2002-02-05 Thread Peter van Oene
Hello intervals are link specific. I'm not sure why varying hello timers on different links would be relevant. At 06:23 PM 2/4/2002 -0500, Walter Rogowski wrote: >If you debug ospf adjacencies you might see complaints re mismatched >hello intervals. > >-Original Message- >From: [EMAIL

Re: OSPF DR problem [7:34379]

2002-02-05 Thread John Neiberger
This is why I didn't make too big of a deal about the two instances of area one. I know a discontiguous area 0 is bad, but I seemed to recall that it doesn't matter if there are multiple instances of other areas. I wasn't sure of that, though, it was just in the back of my mind. It will be inte

info on blocking aol im [7:34459]

2002-02-05 Thread Walls Matthew
Looking to block aol im with pix and 2600s router. Seems to use multiple ports, etc Any advice on blocking this?... Matthew J. Walls Sr. Systems Engineer, Systems Development [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=34459&t=34459 -

Interface errors [7:34461]

2002-02-05 Thread Joaquim Lopes
Hi, what could cause this errors? Serial0/0 is up, line protocol is up Hardware is DSCC4 Serial Internet address is 10.172.1.2/30 MTU 1500 bytes, BW 2048 Kbit, DLY 2 usec, reliability 255/255, txload 1/255, rxload 3/255 Encapsulation PPP, loopback not set Keepalive set (10 s

Re: Interface errors [7:34461]

2002-02-05 Thread Steven A. Ridder
Mt first guess is a timing issue with CO or dirty line. ""Joaquim Lopes"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi, what could cause this errors? > > > Serial0/0 is up, line protocol is up > Hardware is DSCC4 Serial > Internet address is 10.172.1.2/30 > MTU 1500 by

Re: 4000 Series switch [7:34449]

2002-02-05 Thread Patrick Ramsey
for the most part, cat os based switches are the same and ios based switches are the same...every once in a while you catch something different..but to answer you, the 4000 series and 5000 series are the same. -Patrick >>> Nisus 02/05/02 05:21AM >>> First of all I would like to thank you who re

MPLS MTU on 29XX/35XX-XL? [7:34464]

2002-02-05 Thread Andy Harding
hi all, anyone know whether MPLS-size MTUs are supported on the 29XX/35XX-XL switches? and if so, from what IOS revision? thnx -andy Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=34464&t=34464 -- FAQ, list archives, and sub

Milwaukee-area Cisco Users Group [7:34465]

2002-02-05 Thread Davis, Scott [ISE/RAC]
The February 6 Milwaukee-area Cisco Users Group meeting has had a change of location to accommodate more attendees. The new location is Marquette University Cudahy Hall 1313 W. Wisconsin Ave. Room 401. The time is still 5 - 7pm. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=

Re: Interface errors [7:34461]

2002-02-05 Thread Tom Martin
Joaquim, I had a similar problem with CRC and Frame alignment errors that turned out to be a bad CSD/DSU. It looks like you might be experiencing this as well, especially given the number of interface resets. - Tom In article , "Joaquim Lopes" wrote: > Hi, what could cause this errors? > >

RE: info on blocking aol im [7:34459]

2002-02-05 Thread Roberts, Larry
You need to block access to the login server IP's. If I remember it is login.oscar.aol.com. Just nslookup the ips associated and block them ( I do it via a route to null0) Same process with Yahoo IM, although you have to block about a million address's it seems like. Both services change IP's re

RE: Interface errors [7:34461]

2002-02-05 Thread Casey, Paul (6822)
Make sure the dulplex is set correctly, full/half etc. > -Original Message- > From: Tom Martin [SMTP:[EMAIL PROTECTED]] > Sent: 05 February 2002 15:58 > To: > Subject: Re: Interface errors [7:34461] > > Joaquim, > > I had a similar problem with CRC and Frame alignment errors th

RE: Interface errors [7:34461]

2002-02-05 Thread Fraasch James
This is the Cisco definitive link on errors you see when doing a show interface serial x command. I have referenced it many times working with PacBell. http://www.cisco.com/warp/public/112/chapter15.htm Good luck! James Casey, Paul (6822) wrote: > > Make sure the dulplex is set correctly, fu

VLan accesability [7:34471]

2002-02-05 Thread Nisus
First of all thanks again to you who have been replying to my questions. You all rock !!! Ok if you have an uplink port from a 4000 series switch to a 2610 router going out to a T1 included in a VLan along with port 27 (used for example). Will ports not in this VLan be able to get out to the rout

RE: info on blocking aol im [7:34459]

2002-02-05 Thread Patrick Ramsey
or you can script the replacement od such services with an executable that reads "The application is not allowed" assuming you are scrupting logins that is This can be done in NT or novell... -Patrick >>> "Roberts, Larry" 02/05/02 11:10AM >>> You need to block access to the login server I

RE: Long....RE: CCIE starting pay [7:33899]

2002-02-05 Thread Keyur Shah
I did not mean to say without touching production network. -keyur shah- -Original Message- From: nrf [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 05, 2002 5:27 AM To: [EMAIL PROTECTED] Subject: Re: LongRE: CCIE starting pay [7:33899] If I may ask, why exactly is it a good t

Re: Route-map question [7:34431]

2002-02-05 Thread Tom Martin
Hunt, You are correct, there is nothing filtering the routes entering from Router B, without local preference set higher on 10.1.1.1 (Router A?) for the routes, nothing will prevent AS 202 from being used for other destinations as well. More confusing to me is the configuration. I read the ques

Port spanning question [7:34469]

2002-02-05 Thread Bates, Steven (SIGNAL)
Is it possible to do port spanning on a router, or is this just a layer 2 option? Thanks Steven Kell Bates Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=34469&t=34469 -- FAQ, list archives, and subscription info: http://www.g

Re: OSPF DR problem [7:34379]

2002-02-05 Thread s vermill
Priscilla Oppenheimer wrote: > > Remember, I think from a design point of view. I say "for some > reason > there's an Area 2" because I think it's a bad design not > because I was > surprised to see it there in the show output. ;-) Well that certainly makes sense. I thought you were surprised

Re: Interface errors [7:34461]

2002-02-05 Thread Gaz
Kick yourself...now..Serial Interface ""Casey, Paul (6822)"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Make sure the dulplex is set correctly, full/half etc. > > > > -Original Message- > > From: Tom Martin [SMTP:[EMAIL PROTECTED]] > > Sent: 05 February 2002

Doyle on Stub and Totally Stubby areas [7:34478]

2002-02-05 Thread Cebuano
Hi, group. Please clarify this description by Doyle regarding stub and totally stubby areas. As indicated on page 480... "ABRs at the edge of a stub area will use Network Summary LSAs [i.e. Type 3?] to advertise a single default route (destination 0.0.0.0) into the area." Then on page 482... "The

Re: Port spanning question [7:34469]

2002-02-05 Thread Tom Martin
Steven, STP is a layer 2 only function and in general it is configured only on switches. It can be configured on a router if the router is configured to act as a transparent bridge. More info can be found on Cisco's web site at: http://www.cisco.com/univercd/cc/td/doc/product/software/ssr83/rp

RE: Doyle on Stub and Totally Stubby areas [7:34478]

2002-02-05 Thread s vermill
Yes that wording, when directly compared, is a little confusing. But you have the right understanding. Stub areas only summarize the AS external routes, leaving all of the IA routes in tact. Totally stubby areas get only one outside route - whether IA or AS external - 0.0.0.0. Put in different

RE: VLan accesability [7:34471]

2002-02-05 Thread Don Nguyen
If I'm reading your question correctly, the link between your router and switch would be a trunk line. You would have to set the 2610's eth0 up with subinterfaces to route your VLAN, this is assuming you don't have a VLAN routing capable device somewhere else in your network already. This will a

Re: Doyle on Stub and Totally Stubby areas [7:34478]

2002-02-05 Thread Tom Martin
Elmer, In short, a totally stubby area blocks all Type 3, 4 and 5 LSAs from entering the stub area. A stub area blocks all Type 4 and 5 LSAs from entering the stub area. Both inject an additional Type 3 into the stub for the default route. >From the perspective of a stub router, you will see a

Re: VLan accesability [7:34471]

2002-02-05 Thread Tom Martin
Steven, I am not 100% clear on the question that you have asked. To get two VLANs communicated to the 2610 router would require trunking both the port on the switch and the port on the router. Unfortunately the 261x routers do not support trunking. The 262x routers do (with the Plus feature se

Re: Port spanning question [7:34469]

2002-02-05 Thread Steven A. Ridder
I believe it's just switch function. If I'm wrong, someone will correct me, but I'm 99.9% sure. ""Bates, Steven (SIGNAL)"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Is it possible to do port spanning on a router, or is this just a layer 2 > option? > > Thanks > > Steven Kel

IPX Routing problem-Conclusion [7:34485]

2002-02-05 Thread Fraasch James
Ah, to be a network engineer!!! The fun!!! So here it is, 28 hours later I have fallen across the solution to the problem I posted yesterday where people were not able to access an IPX server. Users were actually able to access it but for no more than a few minutes at a time. Had to add the fol

Re: VLan accesability [7:34471]

2002-02-05 Thread Don Nguyen
Doh, I assumed all of the 2600 series routers had ports capable of trunking, forgot you need ports capable of 100mb in order to trunk =P Don Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=34486&t=34471 -- FAQ, list archives, and

RE: VLan accesability [7:34471]

2002-02-05 Thread Tom Martin
The 261x series routers do not support trunking. 262x routers with the Plus feature-set do, but that won't help much here. - Tom On Tue, 05 Feb 2002 12:51:18 -0500, Don Nguyen wrote: > If I'm reading your question correctly, the link between your router and > switch would be a trunk line. You

RE: Port spanning question [7:34469]

2002-02-05 Thread Hire, Ejay
Inherent port-spanning, no. You can bridge the ports, but your port will be "pruned" after it (the router acting as a bridge) learns the connect Mac Addresses. -Original Message- From: Tom Martin [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 05, 2002 12:41 PM To: [EMAIL PROTECTED] S

Re: Doyle on Stub and Totally Stubby areas [7:34478]

2002-02-05 Thread Cebuano
Exactly. And to add to the LSA-confusion, NSSA'a get a default Type 7 with the command nssa no-redistribution default-information-originate. But for purely academic reasons, I'd like to know what bit is set to inform the neighboring routers in the Totally stubby area that "we are now operating in

Routing Exam [7:34491]

2002-02-05 Thread sohail mir
Hi all, Just wondering if you can point me to the right direction? Soon I will be taking my firs CCNP Routing exam. I have been studing BSCN by Catherine Paquet. Are there any good exams out there to practice? Thanks, Mir Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=3449

Windows code in Cisco devices WAS: Re: PAT'S RULE!!! [7:34492]

2002-02-05 Thread Patricia Leeb-Hart
I contacted the author of the column and he was kind enough to reply. He first saw it on a security consulting gig in which the client (a big one) had their phone system taken out by Nimda, then at a "multi-national law firm", which had been hit hard by Code Red. He's contacting others consultan

RE: Routing Exam [7:34491]

2002-02-05 Thread Ole Drews Jensen
You can follow my RouterChief link below to see what I did, and what I will recommend. Hth, Ole ~~~ Ole Drews Jensen Systems Network Manager CCNP, MCSE, MCP+I RWR Enterprises, Inc. [EMAIL PROTECTED] ~~~ http://www.RouterChie

Re: Doyle on Stub and Totally Stubby areas [7:34478]

2002-02-05 Thread Tom Martin
Elmer, There are no bits set, TSSAs are Cisco-proprietary. TSSAs are configured only on the ABRs. Non-ABRs in the stub area have no idea that they are in a TSSA. - Tom On Tue, 05 Feb 2002 13:59:56 -0500, Cebuano wrote: > Exactly. And to add to the LSA-confusion, NSSA'a get a default Type 7 >

CSPFA [7:34496]

2002-02-05 Thread Ragavendran K Rao (Cognizant)
any CSPFAs here ? tips on the exam please ? This e-mail and any files transmitted with it are for the sole use of the intended recipient(s) and may contain confidential and privileged information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copi

Question [7:34497]

2002-02-05 Thread Kazan, Naim
Guys, What the hell is up with cheet-sheets.com? I placed an order and they don't seem to answer their phones or emails. Are they down or out of business? Thanks Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=34497&t=34497

RE: Please confirm (conf#0003fb09d5cd5ec7d70a3c3820ceb098) [7:34498]

2002-02-05 Thread Kazan, Naim
Guys, What the hell is up with cheet-sheets.com? I placed an order and they don't seem to answer their phones or emails. Are they down or out of business? Thanks -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 05, 2002 2:42 PM To: [EMAIL

PBX [7:34499]

2002-02-05 Thread Tom Richs
How can I connect a router to a PBX to get it to talk. In specific I'm implementing VoIP and want to connect it to my PBX. Do you use a specific PRI, E&M or what type card and cabling between the two. Thanks. Tom _ Get your FRE

Re: IPX Routing problem-Conclusion [7:34485]

2002-02-05 Thread Tom Martin
Does anyone have any idea why this worked??? Setting the RIP and SAP timers on a __LAN__ link should have had no positive effect. It seems like the only perceivable change would be the flapping of remote networks and servers -- assuming that the timers were not modified on the server also. Any

Re: PBX [7:34499]

2002-02-05 Thread Tom Martin
It really depends on the PBX interfaces available and the type of service you are trying to offer to/from the VoIP side. You will probably want E&M or FXO. - Tom On Tue, 05 Feb 2002 14:47:46 -0500, Tom Richs wrote: > How can I connect a router to a PBX to get it to talk. In specific I'm > imp

Re: PBX [7:34499]

2002-02-05 Thread Steven A. Ridder
then you need dial-peers once you get the signaling right. ""Tom Martin"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > It really depends on the PBX interfaces available and the type of service > you are trying to offer to/from the VoIP side. You will probably want E&M > or FXO

Re: Doyle on Stub and Totally Stubby areas [7:34478]

2002-02-05 Thread [EMAIL PROTECTED]
After reading the first email I to though I understood all of this. So myself and a coworker just got on a white board to draw everything out hint the 5th grade approach :) pictures are always good. But where I got a good definition of this is in Bruce Caslow's book on page 395 it once again clear

OT: Spam from Eric Tanaka at MLCP? [7:34488]

2002-02-05 Thread John Neiberger
I just received the following spam and was wondering if anyone else here received it. I'm basically trying to figure out how they got my email address and I'm wondering if they are gleaning them from this list. This sort of spam--the type pretending to be 'helpful'--*really* irritates me. We

VIP2 microcode [7:34504]

2002-02-05 Thread wu343
I have a vip2 rsm combo and I am unable to see an atm module in the vip2. This happened after I upgraded the IOS to 21.1(10) on the rsm. I have been doing some research and I think it may have to do with a microcode that is invalid for the 12.1 software. If so then were can I get an upgraded micro

Re: Port spanning question [7:34469]

2002-02-05 Thread Priscilla Oppenheimer
I think he was asking about the Switched Port Analyzer (SPAN) feature that allows one to connect a protocol analyzer or RMON probe or other device to one switch port and monitor other ports. This is a switch feature, not a router feature. Priscilla At 12:40 PM 2/5/02, Tom Martin wrote: >Steve

Re: IPX Routing problem-Conclusion [7:34485]

2002-02-05 Thread Priscilla Oppenheimer
The server must be set with the non-standard 300 second timer also? That would be my theory. Priscilla At 02:50 PM 2/5/02, Tom Martin wrote: >Does anyone have any idea why this worked??? Setting the RIP and SAP >timers on a __LAN__ link should have had no positive effect. It seems >like the o

Re: wireless problem. [7:34110]

2002-02-05 Thread Darren Crawford
I am working with Dell TrueMobile AP1100s, Dell TrueMobile 4800s and Cisco AP350s right now. I have my access points configured with hard coded IP addresses. The wireless users have their NICs configured for addressing via DHCP. So they get DNS, WINS and the like via their DHCP request when the

RE: VIP2 microcode [7:34504]

2002-02-05 Thread Daniel Cotts
12 code requires additional DRAM and Flash on the VIP2s. You might want to check what you have vs what is required. Show diag should tell you what you have. > -Original Message- > From: wu343 [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, February 05, 2002 2:15 PM > To: [EMAIL PROTECTED] > S

Re: IPX Routing problem-Conclusion [7:34485]

2002-02-05 Thread Patrick Ramsey
was it traversing two separate vendors by the time it hit the server? I know with 3com and cisco, the defaults for rip and sap updates are different. 3com defaults to update on change only...where cisco's defaults are timed. When you connect both vendors together, cisco will send updates but 3c

VIP2 microcode [7:34511]

2002-02-05 Thread wu343
Daniel thanks daniel I will take a look at that latter, but what about the microcode? Does that have anything to do with it? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=34511&t=34511 -- FAQ, list archives, and subscripti

access-list in pix 520 [7:34512]

2002-02-05 Thread george gittins
access-list 1 deny ip 10.1.0.0 255.255.0.0 host X.X.X.X access-group 1 in interface inside once i apply it i lose outside connectivity I imagine that the same rules apply as routers a explicit deny at the end so i would have to place a allow ip any any at the end right? well what if im creating a

Re: IPX Routing problem-Conclusion [7:34485]

2002-02-05 Thread Fraasch James
It is Cisco to Cisco. 7204 to 2600. 'By changing the update interval from 1 minute to 5 minutes you are preventing the route and server from flapping and thereby keeping your connection to the server up.' This is what the Cisco tech said- AFTER I had already put the command in. I am not sure why

Re: PBX [7:34499]

2002-02-05 Thread Michael Williams
We are looking at doing the same. I was hoping to use the T1 Voice trunk module to connect to the PBX. Other than signalling (ESF/B8ZS) what kinds of technical specs do I need to know about the PBX to make this work? Mike W. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=345

Re: PBX [7:34499]

2002-02-05 Thread Steven A. Ridder
if wink-start signaling, then the type (delay, immediate, wink, etc) ""Michael Williams"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > We are looking at doing the same. I was hoping to use the T1 Voice trunk > module to connect to the PBX. Other than signalling (ESF/B8ZS) w

Re: IPX Routing problem-Conclusion [7:34485]

2002-02-05 Thread John Neiberger
IIRC, in the config you posted the intervals were changed on a token ring interface. Is that how you have the 7204 and 2600 connected? If so, are they the only devices on the token ring? John >>> "Fraasch James" 2/5/02 1:58:02 PM >>> It is Cisco to Cisco. 7204 to 2600. 'By changing the updat

Re: IPX Routing problem-Conclusion [7:34485]

2002-02-05 Thread Patrick Ramsey
this should also work: ipx update interval rip changes-only ipx update interval sap changes-only those are on the interface itself -Patrick >>> "Fraasch James" 02/05/02 03:58PM >>> It is Cisco to Cisco. 7204 to 2600. 'By changing the update interval from 1 minute to 5 minutes you are preventi

Re: Port spanning question [7:34469]

2002-02-05 Thread Michael Williams
Here's an interesting twist to that question: If your switch/router is a 6500 running Native IOS, can you span ports that are configured as router interfaces as opposed to switchports? I'm using a 6509 with Native IOS, and I have a server connected to a port configured as a "switchport". I was

Re: Interface errors [7:34461]

2002-02-05 Thread Michael Williams
Steven A. Ridder wrote: > > Mt first guess is a timing issue with CO or dirty line. Agreed. I would have the telco test the line with that many errors. It is possible that it's a bad CSU/DSU or even a bad cable (RJ-48 to the CSU/DSU or V.35 from the CSU to the router), but you can replace thos

Undocumented iBGP Behavior (Confirmed by Cisco) [7:34521]

2002-02-05 Thread W. Alan Robertson
Folks, Just to let you know, I ran across what looked like a bug in Cisco's BGP code... Turns out, this is undocumented new behavior. We just deployed a pair of 3640s for one of our customers, for dual-router, dual-homed Internet connectivity. We are taking full tables from Genuity (AS 1), and

Re: Port spanning question [7:34469]

2002-02-05 Thread Patrick Ramsey
how are you liking ios? seen any problems or performance issues? >>> "Michael Williams" 02/05/02 04:36PM >>> Here's an interesting twist to that question: If your switch/router is a 6500 running Native IOS, can you span ports that are configured as router interfaces as opposed to switchports?

Re: IPX Routing problem-Conclusion [7:34485]

2002-02-05 Thread Fraasch James
Yup, I made the changes on the TokenRing interface itself, not the WAN interface. The original config I posted listed just one of the routers that was connected via a serial interface (all T1 lines). There are actually 7 serial connections to this and five token rings. Each interface is its own

Re: Undocumented iBGP Behavior (Confirmed by Cisco) [7:34521]

2002-02-05 Thread Patrick Ramsey
ha! Is that allowed? >>> "W. Alan Robertson" 02/05/02 04:40PM >>> Folks, Just to let you know, I ran across what looked like a bug in Cisco's BGP code... Turns out, this is undocumented new behavior. We just deployed a pair of 3640s for one of our customers, for dual-router, dual-homed Inte

RE: access-list in pix 520 [7:34512]

2002-02-05 Thread Keyur Shah
George, On PIX you can have only one acl can be applied inbound on a given interface (same as router, except router will allow one in and one out rule per interface). There is implicit deny at the end of acl just like router IOS. And pix does not use wildcard, it uses regular mask in acl. -Keyur

A Review of Hello Computers workbook for CCIE secu [7:34507]

2002-02-05 Thread Priscilla Oppenheimer
Hello Computers recently published their "Lab Workbook for Cisco CCIE Security Lab Exam Preparation." Keyur Shah from Hello Computers, Inc. asked me for feedback on the workbook. I decided to share my feedback with Group Study. The workbook is a great learning tool and a lot cheaper than buying

RE: access-list in pix 520 [7:34512]

2002-02-05 Thread Roberts, Larry
Yes there is an implicit deny any any at the end. You can only apply one access-list per interface. If you attempt to place a second one, it will just replace the first on. ( At least with 5.2 and earlier code ) Best link I can give you is: http://www.cisco.com/warp/public/110/pix_command_ref.s

BGP Confederations [7:34526]

2002-02-05 Thread Cebuano
More clarifications needed... 1. Can you have route reflectors within a confederation if the IBGP peers don't have a full mesh? 2. Can you "sub"-confedrate a confederation like you do VLSM for IP addressing? I'm just curios because ... 1. I haven't come across the answers on Halabi's Case Studi

RE: VIP2 microcode [7:34511]

2002-02-05 Thread Daniel Cotts
Don't think so. Latest microcode should come with the updated IOS. I would hope that they wouldn't break it. Here's two sources of Undocumented commands. Not sure what the commands I included will show. Hope that your box isn't in production - just in case. http://www.i-n-t.de/ccie/ios_commands.h

Re: Undocumented iBGP Behavior (Confirmed by Cisco) [7:34521]

2002-02-05 Thread John Neiberger
I'm having trouble seeing this as good behavior. How does the iBGP peer that withdrew all those routes know if the route on the other peer has changed, perhaps for the worse? Let me restate the issue to make sure I understand what you're saying. [AS1] [AS701] |

kazaa / morpheus blocking / rate-limiting [7:34529]

2002-02-05 Thread bergenpeak
Hi, Wondering if anyone has been using ACLs to block or rate-limit Kazaa/Morpheus traffic. I'd be interested in how well this worked. Thanks Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=34529&t=34529 -- FAQ, list archives,

Re: IPX Routing problem-Conclusion [7:34485]

2002-02-05 Thread John Neiberger
Very interesting. I wonder why someone would tweak those values on the server in the first place. Unless all the devices on a LAN segment are using the same values, problems are going to arise. From the sounds of it, someone changed the server settings and didn't bother to let everyone else kno

Renting Cisco Equipment [7:34531]

2002-02-05 Thread Greg Harper
Greetings, Does anybody on the list know of any companies that will rent or short-term lease Cisco equipment? I need an AS5400 temporarily to minimize the downtime of an ISP migration, and am having trouble finding companies that handle this type of thing. Thanks, Greg Message Posted at: ht

Re: Your Password at GroupStudy! [7:34303]

2002-02-05 Thread Jeff Buehler
I suggest the SECURITY Certification. :) http://www.cisco.com/warp/public/10/wwtraining/certprog/c_and_s/ccip/ http://www.cisco.com/warp/public/10/wwtraining/certprog/c_and_s/ccip/pop_sec urity_training.html watch word wrap ""Indra Moodley"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PR

Re: IPX Routing problem-Conclusion [7:34485]

2002-02-05 Thread Fraasch James
Well, I wish it was as easy as saying someone tweaked with the timers on the server but for some reason all our servers are set the same way and so all of our routers have to be set the same way as well. Not only that, but if you look at that TokenRing interface, we are using administrative mac-ad

Re: Undocumented iBGP Behavior (Confirmed by Cisco) [7:34535]

2002-02-05 Thread Manny Gonzalez
Is there a STOP command? Something to let us turn that behaviour off? The way I see it is, if the router with the 104000+ routes suddenly dies, the other router (the one with 700 routes) has to then get all these routes from it's remote-as peer and that could take a while (if never, or until refre

Re: Undocumented iBGP Behavior (Confirmed by Cisco) [7:34536]

2002-02-05 Thread Przemyslaw Karwasiecki
Correct me if I am wrong but this: > if an iBGP peer learns that another iBGP peer already has a better > route to a specific prefix, it will issue a withdrawl to that peer > for the prefix(es). is perfectly normal, standart behaviour. If your Genuity route is better, you will select this route

Concentrator 3030 RADIUS authentication [7:34537]

2002-02-05 Thread Jim Bond
Hello, I'm trying to set up authenticating groups externally through RADIUS. I created a group and changed the type to "External". On my RADIUS server (Safeword 5.1), I created a group with the same name on 3030. Users couldn't get authenticated. On 3030 log, it said user unspecific. Any thought

Re: Undocumented iBGP Behavior (Confirmed by Cisco) [7:34538]

2002-02-05 Thread Przemyslaw Karwasiecki
Alan, This router with 700 routes via iBGP does have remaining 103300 routes, but from eBGP, right? Przemek On Tue, 2002-02-05 at 17:33, Manny Gonzalez wrote: > Is there a STOP command? Something to let us turn that behaviour off? > The way I see it is, if the router with the 104000+ routes s

RE: VIP2 microcode [7:34511]

2002-02-05 Thread Daniel Cotts
Adding to my previous post. The slot number of the vip card should be included in the command after the word "vip". > -Original Message- > From: Daniel Cotts [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, February 05, 2002 4:10 PM > To: [EMAIL PROTECTED] > Subject: RE: VIP2 microcode [7:3451

Re: Port spanning question [7:34469]

2002-02-05 Thread Bates, Steven (SIGNAL)
Actually what is going on is we are trying to get the port span feature going on a 6509 with native ios. As soon as I turn on the monitor session destination, the device that is plugged into the port can no longer ping, etc. If this is an IDS that is monitoring an egress pipe, how will it do s

700 in area! Re: IPX Routing problem-Conclusion [7:34485]

2002-02-05 Thread ipguru1
I saw the 100 routers in an area and had to share this! I had an instructor a couple of years ago that worked for IBM-Europe. He said they tried to keep European areas for countries. 1 Country = 1 Area. This all came up when another student asked, "what is a good measure for the number of rout

Re: Undocumented iBGP Behavior (Confirmed by Cisco) [7:34541]

2002-02-05 Thread W. Alan Robertson
Yes, it does... So, if the Router with 104k routes from iBGP, and eBGP, loses one from his eBGP neighbor, he will issue a withdrawl to the iBGP peer. The iBGP peer will turn around an announce that it has a route to that prefix... I understand why this sounds, on the surface, like a terrible th

RE: Renting Cisco Equipment [7:34531]

2002-02-05 Thread Circusnuts_1999
Call your local Cisco rep and explain your situation. I know here in the DC region, we have had to rob the Reston, VA lab many many times. Phil -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Greg Harper Sent: Tuesday, February 05, 2002 5:17 PM To: [EM

RE: Undocumented iBGP Behavior (Confirmed by Cisco) [7:34543]

2002-02-05 Thread Ouellette, Tim
The 2nd router that only has 700 routes in it's routing table that it learned from it's IBGP still has the other 103k routes in it's adj-rib-in from it's ebgp peer right, they are just sitting dormant? So if the other router somehow lost it's ebgp peer, it'll send withdraws to the ibgp peer and t

Re: Undocumented iBGP Behavior (Confirmed by Cisco) [7:34544]

2002-02-05 Thread Peter van Oene
cisco by default prefers ebgp over ibgp. it should not, by default, enjoy the ibgp routes learned from the peer over the ebgp learned routes. At 05:37 PM 2/5/2002 -0500, Przemyslaw Karwasiecki wrote: >Correct me if I am wrong but this: > > > if an iBGP peer learns that another iBGP peer alrea

  1   2   >