DSL Clock [7:40791]

2002-04-08 Thread Hamid
Hi Group. I have a DSL connection with a DSL modem connected on my NM-4T module . modem generates its internal clock at 528000 bps. and other side ( customer ) is same modem with this clock I want to know at this clock ( 528kbps ) , at a time the total ( SEND + RECIVE ) can not be over 528kbps

RE: PIX VS CheckPoint [7:40136]

2002-04-08 Thread Mark Odette II
Timo- Which version of the PDM are you referring to that has the VPN config capability?? I have 1.1.2 now, and I have not found that functionality... Am I just overlooking something!?!?! TIA for your response. -Mark Odette II -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

CCIE LAB test questions [7:40793]

2002-04-08 Thread [EMAIL PROTECTED]
Hi all, I passed my written test a few months ago and just finished to build a lab at home. I'm curious to know what subjects are asked at the LAB test Routing Switching. I do not want to know in detail whats happening at the test but just the topics like: BGP OSPF ISDN Frame VPN IPsec etc

DSL clock [7:40794]

2002-04-08 Thread Hamid
Hi Group. I have a DSL connection with a DSL modem connected on my NM-4T module . modem generates its internal clock at 528000 bps. and other side ( customer ) is same modem with this clock I want to know at this clock ( 528kbps ) , at a time the total ( SEND + RECIVE ) data can not be over

OT: Cisco SmartNet [7:40795]

2002-04-08 Thread Widjaja Surja Kentjana
Hi all, I would like to find out some info about Cisco SmartNet. Can I buy a SmartNet (for a particular category) for EOL equipment? This is for cisco 2503 for example. Thanks. Widjaja Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=40795t=40795

Re: VPN 500 Concentrator and non-Cisco VPN clients [7:40788]

2002-04-08 Thread Engelhard M. Labiro
Hi Mason, I doubt that there is an universal VPN clients that can make a VPN connection to a Cisco VPN product, except the client made by Cisco. Last time I did attend a two days training for VPN 5000, at that time we have to use VPN 5000`s client. HTH - Original Message - From:

Re: Puzzles - WAS RE: My interview story [7:40553]

2002-04-08 Thread [EMAIL PROTECTED]
How about lock the courier inside the box, throw away the key, keep the diamond? Patrick Ramsey cc:

RE: Ancient Isdn bri wisdom ? [7:40586]

2002-04-08 Thread Herold Heiko
To everyone, thank you for your advice, what you wrote seems reasonable. However it seems this would mean if there are only single channel connections (64k or 56k only) [m]route-cache and fair-queue can remain enabled. I'll try that asap. Heiko Herold -- -- PREVINET S.p.A.[EMAIL

RE: PIX VS CheckPoint [7:40136]

2002-04-08 Thread Tim O'Brien
With PDM 2.0 and PIX OS 6.2 you will be able to do this. It was suppose to be out last month.. I guess they are still working the bugs out of it... Tim CCIE 9015 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Mark Odette II Sent: Monday, April 08,

Re: any comments on my acl page ? [7:40785]

2002-04-08 Thread Kris Keen
Very extensive, mad :) Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=40800t=40785 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL

Pix Labs ... [7:40801]

2002-04-08 Thread Paul
Does anybody know of any sites similiar to R1R2.com that allow you to configure a Pix Firewall ??? Or any software similiar to Boson Router Sim that will allow you to configure a Pix ??? Or any other suggestions regarding Pix hands-on training ... Kind regards ... Paul .. Message Posted

Re: Core layer question [7:40535]

2002-04-08 Thread Steven A. Ridder
I had classes at Cisco on SAFE (EXCELLENT STUFF IF ANYONE GET'S TO GO!!) , and the Cisco rep said the same thing - never put anything in core. If you look at the SAFE blueprint for Enterprises, the IDS aren't in the core either (I checked last week). Priscilla Oppenheimer wrote in message

Re: CCIE LAB test questions [7:40793]

2002-04-08 Thread Jay
The Cisco site says you are responsible for anything in IOS 12.1. If the test were any more specific, it wouldn't be as highly regarded as it is. On Mon, 2002-04-08 at 02:52, [EMAIL PROTECTED] wrote: Hi all, I passed my written test a few months ago and just finished to build a lab at

Re: netbios over internet [7:40784]

2002-04-08 Thread Jay
I don't think you can, besides bridging on every internet hop. On Sun, 2002-04-07 at 23:14, cage wrote: how can I make the netbios over Internet except the dlsw+ ? Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=40804t=40784 --

re: ccnp or certification specialist [7:40805]

2002-04-08 Thread Joseph Rago
Hello i currently have a masters in telecom and i am also ccna, wireless . My CCNA runs out may of 2003. Should i go for the ccnp or go for the security specialization. Thanks Joe R. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=40805t=40805

Re: iBGP full mesh ? [7:40741]

2002-04-08 Thread Jay
BGP Rules of thumb: BGP advertised prefix must also exist in local IGP table. iBGP learned prefix must also exist in local IGP table -or use #no sync on iBGP learning router, but if you do, you'd sure as hell better know why you disabled it. On Sun, 2002-04-07 at 09:22, Phil Barker wrote:

ISDN and VPN (IPSEC 3DES) [7:40807]

2002-04-08 Thread Curious
Guys Any of you familier with issues between ISDN and Cisco VPN Client (IPSEC 3DES). All of my ISDN users unable to VPN using Cisco VPN Client, and we have pICX 515. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=40807t=40807 --

Re: Puzzles - WAS RE: My interview story [7:40553]

2002-04-08 Thread Howard C. Berkowitz
How about lock the courier inside the box, throw away the key, keep the diamond? With that answer, you probably would get the Microsoft job, but they'd offer you one in competitive marketing! how about lock his box inside your box, let him keep his key and send the key with your box with

standard trunk protocol [7:40809]

2002-04-08 Thread TP
Dear Group, I'm confused. In a multi-vendor enviroment I've to design a VLANs scenario. So I can prefer 802.1Q tagging (standard) on the trunk link. And then? How to manage the VLAN informations? Is VTP (or DTP) a cisco protocol? Is there a standard in order to manage the vlan information

Re: netbios over internet [7:40784]

2002-04-08 Thread Engelhard M. Labiro
How about NetBIOS over TCP/IP (NBT) and encapsulate it with IPSec. Another idea is using a GRE tunnel to pass the NetBIOS to the next hop. I don't think you can, besides bridging on every internet hop. On Sun, 2002-04-07 at 23:14, cage wrote: how can I make the netbios over Internet

RE: what does 0 in 0Xnnnn mean? [7:40372]

2002-04-08 Thread Michael Bray
Actually the answer to this is very simple... The '0x' means hexadecimal - this has been mentioned several times. The '0' indicates that it is a number, as opposed to a variable. 0xff can be interpreted by the parser as a number, but xff would be interpreted as a variable name... Mike Bray

RE: Core layer question [7:40535]

2002-04-08 Thread Kent Hundley
Looking at the traffic should not slow anything down. The IDS blade has its own processor and is a completely separate device from the sup. If anything, the IDS blade may not be able to keep up with the traffic and you may miss some traffic for inspection, ie. the IDS blade might not catch all

Re: netbios over internet [7:40784]

2002-04-08 Thread Jay
Is it possible to send nonroutable traffic through a GRE Tunnel? On Mon, 2002-04-08 at 10:12, Engelhard M. Labiro wrote: How about NetBIOS over TCP/IP (NBT) and encapsulate it with IPSec. Another idea is using a GRE tunnel to pass the NetBIOS to the next hop. I don't think you can,

RE: TCP/IP and DOD [7:39657]

2002-04-08 Thread William Gragido
No, we upgraded it ourselves Rico, I was there throughout the ninetieswe went from Banyan environments to IP (Unix/NT). -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Rico Ortiz Sent: Friday, April 05, 2002 6:42 PM To: [EMAIL PROTECTED] Subject: RE:

Re: iBGP full mesh ? [7:40741]

2002-04-08 Thread MADMAN
I can think one one good reason why you would disable sync, you can't redistribute 100K routes into ANY IGP. Why are you so concerned about disabling sync?? It should be default. Dave Jay wrote: BGP Rules of thumb: BGP advertised prefix must also exist in local IGP table. iBGP

port mirroring and vlans [7:40816]

2002-04-08 Thread GOGS
Hi all, can anyone tell me if you have two cat3548's configured with an crossover connecting them (trunk port for all intensive purposes) and you port mirror vlan 1 on a single port on one of the switches (all ports are in vlan 1) will you get all traffic to the mirror port including those from

RE: CCDP or CCIE [7:40732]

2002-04-08 Thread Andy Barkl
Not once you have successfully completed your CCNP. As long as you shift yourself into the design-frame of mind, you should have no problem. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of amanda lalli-cafini Sent: Sunday, April 07, 2002 10:26 PM To:

Re: CCDP or CCIE [7:40732]

2002-04-08 Thread raj
test amanda lalli-cafini wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi Andy, gee... passing a cisco test in 2 weeks would be pretty fast. regards, amanda Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=40817t=40732

Re: iBGP full mesh ? [7:40741]

2002-04-08 Thread Jay
It's not default for the same reason why unicast rpf (antispoofing) is not default in ISO; because people are stupid, and under poor design, it could produce very undesirable and hard to troubleshoot results. In other words, if you don't know why you are disabling synchronization, don't do it.

Re: CCDP or CCIE [7:40732]

2002-04-08 Thread raj
hey amanda.. passing a cisco (ccnp) test in 2 weeks is easy.. these ccnp tests are very easy but soon they would all change into 640-603,4,5,6 which are not going to be that easy.. i myself completely my ccnp-4 exams in 40 days. amanda lalli-cafini wrote in message [EMAIL

bscn test [7:40821]

2002-04-08 Thread NetEng
took that bscn test today, 69 ?'s and a bunch of time, but finished with only about 8 minutes left. Equal mix of EIGRP/OSPF/BGP and a couple of questions (each) regarding the rest of the exam outline. scored an 801..but it's passing. Message Posted at:

RE: netbios over internet [7:40784]

2002-04-08 Thread Kim Edward B
I don't think it can. As far as I know, it can do IP/IPX/DecNet/AppleTalk/Vines/CLNS. NetBios over TCP/IP will work with GRE but not straight NetBios or SNA. If GRE works with NetBios or SNA, it will be cool. I think that is why we use DLSW with NetBios and SNA connection. Ed -Original

Boson Test Help [7:40822]

2002-04-08 Thread [EMAIL PROTECTED]
Hello all, I schedule myself to take the new CCNA exam next week, could someone let me know should I buy all three Boson exams or just the #1 exam is good enough for the new version. Thanks Philip Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=40822t=40822

RE: ISDN and VPN (IPSEC 3DES) [7:40807]

2002-04-08 Thread Daniel Cotts
It might be good to post some sanitized configs. Without that, my first guess would be to check what you define as interesting traffic. -Original Message- From: Curious [mailto:[EMAIL PROTECTED]] Sent: Monday, April 08, 2002 8:38 AM To: [EMAIL PROTECTED] Subject: ISDN and VPN (IPSEC

Re: Routing Question [7:40766]

2002-04-08 Thread timothy thielen
This is why we love Priscilla. :-) Here we were making the ASSumption that we were using a classfull subnet mask. Thank you, Priscilla, for once again letting us know we aren't really worthy! :-) --Tim Priscilla Oppenheimer wrote: How many bits are defining network IDs and how many are

RE: TCP/IP and DOD [7:39657]

2002-04-08 Thread Brian Zeitz
I worked my last contract I don't want to say where, but a major educational testing place. They still had banyan Vines in 2001. although I didn't touch it besides migration. I didn't think it was still around. We migrated them to Windows 2000. The banyan Vines servers left, but the mindsets of

RE: Pix Labs ... [7:40801]

2002-04-08 Thread Bernard
Paul, Go to Ole Drews Jensen's website: www.routerchief.com, Free Software, and download the PIX QUIZ - PIX command trainer. This is an excellent, free software. This small software will help you master the PIX commands in no time! Bernard -Original Message- From: [EMAIL

Re: Configure transparent bridging on Cisco router [7:40709]

2002-04-08 Thread timothy thielen
I believe you are right... You are working on a ROUTER, therefore, it prefers to ROUTE ROUTABLE traffic. If you take the ROUTING option away, then it will attempt other configured methods of forwarding traffic. --Tim Priscilla Oppenheimer wrote: At 11:50 AM 4/6/02, nntp.groupstudy.com

Boson test help [7:40829]

2002-04-08 Thread philip lee
Hello all, I schedule myself to take the new CCNA exam next week, could someone let me know should I buy all three Boson exams or just the #1 exam is good enough for the new version. Thanks Philip Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=40829t=40829

RE: Routing Question [7:40766]

2002-04-08 Thread Lidiya White
There may be another problem with the Scenario 3: How R1 int0 will talk to R2 int1 if they are on the same subnet? Are you going to bridge ip traffic? -- Lidiya White -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Sunday, April 07, 2002 9:20 PM To: [EMAIL

RE: port mirroring and vlans [7:40816]

2002-04-08 Thread Michael Williams
AFAIK, if you have to two switches connected via a trunk link and you mirror VLAN1 to a port, you should see all of the traffic in VLAN1 (i.e. from all switches involved in that VLAN). You'll probably run into a situation where all of the traffic in VLAN1 will overrun your mirror port (which on

Re: iBGP full mesh ? [7:40741]

2002-04-08 Thread MADMAN
I understand the what sync does and I also assume that someone setting up such an config, dual homed full routing, should understand BGP fundamentals. It's like auto summerization, I have never seen it fix anything but I have seen it cause problems many times. Dave Jay wrote: It's not

Re: netbios over internet [7:40784]

2002-04-08 Thread Michael Williams
You can use NetBIOS over TCP/IP (using some kind of encryption if you choose), or if you have Cisco routers at either end connected to the internet, you can use DLSw+ to form peers between those two routers to tunnel the NetBIOS across any IP network (LAN/WAN, etc) which allows Layer 2

Re: netbios over internet [7:40784]

2002-04-08 Thread Priscilla Oppenheimer
NetBEUI is non-routable. NetBIOS is routable. NetBIOS over TCP/IP should supposedly work over the Internet. For example, can't you do file sharing over the Internet? That uses NetBIOS and SMB of CIFS. (I'm a Mac person, but in theory it should work. ;-) Priscilla At 10:43 AM 4/8/02, Jay

RE: netbios over internet [7:40784]

2002-04-08 Thread Logan, Harold
The biggest obstacle is the fact that most ISP's filter NBT traffic. It works just fine over a VPN connection, as the ISP doesn't see the NBT packets; they see VPN traffic. Basically all you have to do is get around an access list blocking ports 137, 138, and 139. -Original

RE: port mirroring and vlans [7:40816]

2002-04-08 Thread Priscilla Oppenheimer
At 12:15 PM 4/8/02, Michael Williams wrote: AFAIK, if you have to two switches connected via a trunk link and you mirror VLAN1 to a port, you should see all of the traffic in VLAN1 (i.e. from all switches involved in that VLAN). Only traffic that actually crosses the mirrored port, though,

Re: BCRAN question [7:37481]

2002-04-08 Thread Robert Padjen
A little bird told me that old, non IOS routers were still topics on the beta for RA... --- Steve Ringley wrote: Its an interesting question about the exam though as the 700 series is not on the current product list. I am working on this exam next, and hate to spend time on something

RE: Routing Question [7:40766]

2002-04-08 Thread Priscilla Oppenheimer
See comments below. At 11:19 PM 4/7/02, Kent Browning wrote: Thanks a lot Priscilla. This is what I was looking for. I suppose my part 2 to the previous question would make more sense if I used live IPs like Scenario 3 Scenario 3 == ---int0-(R1)-int1 int0-(R2)-int1 --- Router

RE: netbios over internet [7:40784]

2002-04-08 Thread Michael Bray
You certainly can do file sharing over the internet - saying 'NetBIOS' is routable is a bit misleading though... It's the underlying protocol that determines its ability to be routed... -mike bray [EMAIL PROTECTED] -Original Message- From: Priscilla Oppenheimer [mailto:[EMAIL

Re: netbios over internet [7:40784]

2002-04-08 Thread Jay
This thread has been taken out of context. The real initial question was whether or not you could bridge over the internet. E.g., have 2 LANs that are Layer 2 Bridged over the internet. Somewhat like DLSw+ can do for NetBIOS and SNA. It would have the same effect as doing this: (which you

RE: netbios over internet [7:40784]

2002-04-08 Thread Kim Edward B
I agree. -Original Message- From: Michael Bray [mailto:[EMAIL PROTECTED]] Sent: Monday, April 08, 2002 1:30 PM To: [EMAIL PROTECTED] Subject: RE: netbios over internet [7:40784] You certainly can do file sharing over the internet - saying 'NetBIOS' is routable is a bit misleading

Re: netbios over internet [7:40784]

2002-04-08 Thread Priscilla Oppenheimer
The original question was: how can I make the netbios over Internet except the dlsw+ ? He didn't say bridging. You did. Priscilla At 01:29 PM 4/8/02, Jay wrote: This thread has been taken out of context. The real initial question was whether or not you could bridge over the internet. E.g.,

RE: CCDP or CCIE [7:40732]

2002-04-08 Thread Andy Barkl
Of course it may require more than 2 weeks for your CCDP if you haven't completed your CCDA which is a requirement. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of amanda lalli-cafini Sent: Sunday, April 07, 2002 10:26 PM To: [EMAIL PROTECTED] Subject:

ip/tv [7:40845]

2002-04-08 Thread george gittins
im discussing here at my company to deploy ip/tv . has anyone tried it what do i need. i was reading at cisco web site that you need a nt server which will have the digitizer card... George Gittins Internet Systems Manager Weslaco, Tx 78599 Phone (956)9696557 Message Posted at:

RE: port mirroring and vlans [7:40816]

2002-04-08 Thread Larry Letterman
The only traffic from the mirror port that would be from the other switch would be trunked data. Local traffic on the other switch will not traverse the trunk and would not be seen. Larry Letterman Cisco Systems [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED]

Re: netbios over internet [7:40784]

2002-04-08 Thread Jay
OK, OK, well what about my question then? Is there any way to do this? this: (which you can't do) int tunnel0 tun sour 10.10.10.1 tun dest 10.20.20.1 bridge-group 1 int eth0 bridge-group 1 On Mon, 2002-04-08 at 14:15, Priscilla Oppenheimer wrote: The original question

RE: Puzzles - WAS RE: My interview story [7:40553]

2002-04-08 Thread Dusty Harper
Correct -Original Message- From: John Allhiser [mailto:[EMAIL PROTECTED]] Sent: Saturday, April 06, 2002 6:38 AM To: [EMAIL PROTECTED] Subject: RE: Puzzles - WAS RE: My interview story [7:40553] The first one is simple if you relate it to public key sharing in network security. Place

RE: Puzzles - WAS RE: My interview story [7:40553]

2002-04-08 Thread Dusty Harper
Actually 0' is physically impossible due to the width of the rope needing to be taken into account, but that's just a technicality. -Original Message- From: Craig Columbus [mailto:[EMAIL PROTECTED]] Sent: Friday, April 05, 2002 9:58 PM To: [EMAIL PROTECTED] Subject: Re: Puzzles - WAS

RE: ip/tv [7:40845]

2002-04-08 Thread Larry Letterman
we use ip/tv extensively at the cisco campus for all sorts of multicast video. I can put you in touch with our ip/tv broadcast manager if you like... Larry Letterman Cisco Systems [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Monday,

Backup bridging [7:40851]

2002-04-08 Thread Lindseth, Chris
Gurus- I have a situation where I am using IRB to bridge a network over a T1. I have been trying to get this backed up by using an ISDN BRI dialback with dialer profiles. I have been mostly unsuccessful except for roughly 3 minutes where it worked and then ceased working and has not

Hardening Ports? [7:40852]

2002-04-08 Thread Charlie
Hello, all :-) I was hoping one (or many) of you could help me with a question I have: how do I lock-down ports on a server? I know how to lock them down on firewalls and routers, but how to do it on a server is my question. I know it's a general question but any assistance would be most

Re: Hardening Ports? [7:40852]

2002-04-08 Thread sam sneed
Which operating systems? On windows the most common way to to disable services from the control panel. Do a netstat -an to see which ports are open. Then you can shutdown services that have those ports open. On UNIX/LINUX you can do the same netstat -an. Most of the services can be disabled in

Re: Hardening Ports? [7:40852]

2002-04-08 Thread Patrick Ramsey
do you men ethernet ports or tcpip ports? Ethernet ports are done in the driver autonegotiate/speed/duplex settings locking down tcpip ports is entirely different. TCPwrappers will wrap daemons and applications under *nix... not so sure there is an equivalent for microsoft or

Re: Hardening Ports? [7:40852]

2002-04-08 Thread Charlie
Thank you, Sam. Your instructions were clear and simple to follow. I was refering to a Windows system. I gave it a try and already idenitified open ports (which I also learned from using WS PingPro). I will now attempt to close/end some services. Thanks again. Charlie sam sneed wrote in

Re: How to keep BGP's session open indefinitly with no [7:40856]

2002-04-08 Thread Anthony Pace
I got a message saying it was not a valid value. Is that because I tried to just do one zero (my thinking being it would then give me the valid options for holdtime) I tried ROUTER BGP 100 neighbor 1.1.1.1 timers 0 ? Anthony Pace Chris Camplejohn wrote in message [EMAIL

Re: Hardening Ports? [7:40852]

2002-04-08 Thread Charlie
Patrick - I was refering to TCP/IP ports. Thanks for your reply. Sam's message came in very handy and answered my question as well. Thanks again. Charlie Patrick Ramsey wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... do you men ethernet ports or tcpip ports? Ethernet ports

RE: Hardening Ports? [7:40852]

2002-04-08 Thread Kent Hundley
Charlie, As others noted, it depends on your OS. I would recommend doing a search on google for your OS+hardening. You'll probably find what your looking for. Also consult your vendors web site and http://www.sans.org for more info. HTH, Kent -Original Message- From: [EMAIL

RE: port mirroring and vlans [7:40816]

2002-04-08 Thread Kent Hundley
Priscilla is correct, normally a span only shows unicast for the VLAN on the switch where the span is enabled plus any bcast or mcast from other switches that have active ports in the VLAN in question. However, there is a remote span capability that has been added to the 6000 series in 5.3 code

FS: Catalyst 3920 switches (OEM Olicom 8601) (fwd) [7:40863]

2002-04-08 Thread Brian
I know that many of you studying for your CCIE lab are looking for good deals on some of the more critical peices of CCIE lab gear. As some of you may or may not know, the Catalyst 3900 series was originally made by Olicom, and known as the Olicom OC-8600 (Catalyst 3900) and the OC-8601

Re: netbios over internet [7:40784]

2002-04-08 Thread nwo
Jay wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... OK, OK, well what about my question then? Is there any way to do this? Yes - UTI this: (which you can't do) int tunnel0 tun sour 10.10.10.1 tun dest 10.20.20.1 bridge-group 1 int eth0 bridge-group

Re: Configure transparent bridging on Cisco router [7:40709]

2002-04-08 Thread Anthony Pace
The router will bridge all traffic on those interfaces EXCEPT IP. If you want to bridge IP you disable IP routing or use CRB or IRB which lets you configure your choice of bridge/route per protocol per interface (in the case of IRB you route into the bridge group via the BVI. Anthony Pace

Re: standard trunk protocol [7:40809]

2002-04-08 Thread Erick B.
Yes there is, it's called GVRP which is part/extension of 802.1q. Not all vendors support this though so YMMV. VTP, DTP are Cisco propiertary. --- TP wrote: Dear Group, I'm confused. In a multi-vendor enviroment I've to design a VLANs scenario. So I can prefer 802.1Q tagging (standard)

RE: Ancient Isdn bri wisdom ? [7:40586]

2002-04-08 Thread [EMAIL PROTECTED]
I meant to add to this thread yesterday and didn't get around to it. Be aware that there are bugs with PPP Multilink and fancy queueing (as Cisco puts it) in IOS 12.0. Or at least when interworking 12.0 with either 11.2 or 12.1 - I don't think I've confirmed it with 12.0 at both ends. By

MS Security Operation Guide for Windows 2000 Server - [Was : [7:40869]

2002-04-08 Thread Bac Nguyen
Hi Charlie, FYI, Microsoft just release the Security Operation Guide for Windows 2000 server. Here is the link to it Hope this help! Bac -Original Message- From: Charlie [mailto:[EMAIL PROTECTED]] Sent: Monday, April 08, 2002 2:12 PM To: [EMAIL PROTECTED] Subject: Re: Hardening Ports?

PIX Firewall without NAT [7:40871]

2002-04-08 Thread Daniel Ma
I am trying to configure a PIX firewall behind the Cayman DSL router. Because we only have one Public IP address which is used by Cayman router. I will use 192.168.1.x and 192.168.0.x for the two segments of PIX. Cayman router does NAT job for all users. In this case, could I configure the PIX

Re: Hardening Ports? [7:40852]

2002-04-08 Thread Chee Kin
You can also try using the IP Filtering feature from Windows NT/2000. It should be under the advanced configuration for TCP/IP. cheekin - Original Message - From: Charlie To: Sent: Tuesday, April 09, 2002 4:40 AM Subject: Re: Hardening Ports? [7:40852] Thank you, Sam. Your

RE: port mirroring and vlans [7:40816]

2002-04-08 Thread Priscilla Oppenheimer
Thanks for the info. What will they think of next? ;-) You better have big pipes between those switches. I love the way Cisco gives you enough rope to hang yourself. I was glad to see that they don't let you SPAN BPDUs. You could really screw things up that way! ;-) Priscilla At 05:37 PM

Re: Catalyst 3920 switches (OEM Olicom 8601) (fwd) [7:40863]

2002-04-08 Thread nettable_walker
4/8/2002 9:45pm Monday I have two Catalyst 3920's connected to two 3640 router w/ NM 1FE1R2W. I do not see what the big deal is about this switch !!! Can you please explain the TrCRF and TrBRF thing ? Thanks a great deal, Richard // Brian wrote in message [EMAIL PROTECTED]">news:[EMAIL

Re: PIX Firewall without NAT [7:40871]

2002-04-08 Thread yangchun
hello daniel : you can do it Daniel Ma wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... I am trying to configure a PIX firewall behind the Cayman DSL router. Because we only have one Public IP address which is used by Cayman router. I will use 192.168.1.x and 192.168.0.x for

Re: 6509 trunk to 3524? Any suggestions [7:40876]

2002-04-08 Thread yangchun
3524 .try it. Ouellette, Tim wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Team, can anyone help out. I am seeing the following messages on one of our 6509's. Port 7/2 is connected via fiber to a 3524 closet switch. We've tried replacing the gbic's on both the 6509 and

Re: Hardening Ports? [7:40852]

2002-04-08 Thread Chee Kin
My apologies. Posted to the wrong group. cheekin - Original Message - From: Chee Kin To: Sent: Tuesday, April 09, 2002 9:35 AM Subject: Re: Hardening Ports? [7:40852] You can also try using the IP Filtering feature from Windows NT/2000. It should be under the advanced

Re: 6509 trunk to 3524? Any suggestions [7:40876]

2002-04-08 Thread Dave Collie
Tim, I've had a similar problem in the past between a 5500 and 6509. It was a bad blade in the 5500. R/ Dave On 4/8/02 10:54 PM, in article [EMAIL PROTECTED], Ouellette, Tim wrote: Team, can anyone help out. I am seeing the following messages on one of our 6509's. Port 7/2 is

RE: 6509 trunk to 3524? Any suggestions [7:40880]

2002-04-08 Thread Daryl Wan Wai Meng
Hi, You did not paste your configs, but they should be similar to below: On the 3524 switch interface GigabitEthernet0/1 switchport trunk encapsulation dot1q switchport mode trunk On the 3524, use the following command: show interface g0/1

RE: netbios over internet [7:40784]

2002-04-08 Thread James Wilson
All you have to do to do NetBIOS over the internet is either use WINS or reference the share by IP address, assuming you are using either NT or Win2K. For instance, from a command prompt: net use X: \\123.123.123.123\C$ /user:ntdomain\ntusername Thththththats all folks. God knows why you

RE: port mirroring and vlans [7:40816]

2002-04-08 Thread Michael Williams
Priscilla Oppenheimer wrote: Only traffic that actually crosses the mirrored port, though, right? Broadcast /multicast traffic for the VLAN as well as traffic directed to ports on the switch doing mirroring that are in VLAN 1. You're absolutely right. I can't explain my lack of thorough

RE: 6509 trunk to 3524? Any suggestions [7:40876]

2002-04-08 Thread David C Prall
Tim, This should do it for you http://www.cisco.com/warp/public/473/43.html It appears that you didn't disable trunk negotiation on the 6500. Since the 3500XL doesn't support DTP you are having trouble. David C Prall [EMAIL PROTECTED] http://dcp.dcptech.com -Original Message- From:

RE: port mirroring and vlans [7:40816]

2002-04-08 Thread Michael Williams
Kent Hundley wrote: However, there is a remote span capability that has been added to the 6000 series in 5.3 code that does allow you to see the traffic for an entire vlan from any switch in the net: http://www.cisco.com/warp/public/473/41.html#remote Is there an equivalent version in

Re: netbios over internet [7:40784]

2002-04-08 Thread Michael Williams
Priscilla Oppenheimer wrote: For example, can't you do file sharing over the Internet? That uses NetBIOS and SMB of CIFS. (I'm a Mac person, but in theory it should work. ;-) A Mac person? I thought you had good judgement? (Please no flames, it's a good natured joke) You *can* indeed

Ethernet [7:40886]

2002-04-08 Thread kaushalender
Hi group , we have around 400 computers in the building on the lan .I have one 2610 router which is our gateway router on the ethernet of the router i am recieving huge amount of multicast and crc4 errors . I have one more Telendus router which connected with my customer on serial .The

RE: 6509 trunk to 3524? Any suggestions [7:40876]

2002-04-08 Thread Kris Keen
You cant use dtp with 3524, use the set trunk */* nonegoitate dot1q to force it to trunk... Also make sure you enble on the ge 0/1 on the 3524 as a switch port mode trunk with dot1q encapsulation That will force it to trunk, and life will be sweet. We use Dual 6509's with 10 3548XLs and its

RE: netbios over internet [7:40784]

2002-04-08 Thread James Wilson
I disagree that most ISP's block the following: tcp or udp 135 (mapping) tcp or udp 137 (NetBIOS Name Service) udp 138 (NetBIOS datagrams - the actual data) tcp 139 (NetBIOS Session) Any more than they block the rest of it. If they did, for one thing, your firewalls wouldn't be blocking this

DLSW + [7:40889]

2002-04-08 Thread Isianto Istiadi
Dear guys, I have a stupid question (I'm sure) but I do not have any idea to approach this question. I was using promicious in RA, RB,RC, and remote peer Ra to RB, but I don't know how to use only one peer to build session Between RA,RB,RC. RA === RB === RC Can you build session from RA to

RE: 6509 trunk to 3524? Any suggestions [7:40890]

2002-04-08 Thread Ouellette, Tim
Thanks for the quick response guys. Found a faulty mx extender between the 6509 and the 3524. Does the 3524 support pagp? I did receive a message from David mentioning something about having the 6509 being set to negotiate the dot1q. I'll have to look into this a little more. Anyone one else a

RE: 6509 trunk to 3524? Any suggestions [7:40876]

2002-04-08 Thread Ouellette, Tim
usmdlz1329000101 (enable) sh trunk 7/2 * - indicates vtp domain mismatch Port Mode Encapsulation StatusNative vlan --- - --- 7/2 on dot1q not-trunking 1 Port Vlans allowed on trunk