Re:why ip inspect block my traffic? [7:43812]

2002-05-10 Thread ira
It's CBAC you are dealing with. You have an acl to protect you from incoming traffic. If trffic to a certain destination exits your router, then an entry is added to this acl to permit responses from that destination to come in. That's all. Inspect means the router makes that inspection on

encapsulation failure on an 806 router [7:43813]

2002-05-10 Thread Dimitrije
Got an 806 router with two Ethernet interfaces used for broadband access to the Internet. Ethernet 1 is typically the WAN interface pointing towards the Internet router, while Ethernet 0 is a 4-port hub used for the local LAN. Everything works properly when the 806 is configured in the

RE: Reg: OSPF [7:43726]

2002-05-10 Thread Brian Hill
Oops, just realized I said diffusing computation, when I meant SPF computationSorry, diffusing comps are EIGRP :( Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=43814t=43726 -- FAQ, list archives, and subscription info:

Re: why I can't use normal ping in new router??? [7:43709]

2002-05-10 Thread Kenny Smith
Thanks.. Priscilla.. I understamd what you mean about the route issue and I think it is right. But I don't have one more issue. That's the DNS. I tried to test whether new DNS is working or not with the following. But it always give me Bad IP address, but the DNS IP is proven to be working

Re: Recommended study books for CCNP routing (BSCN) [7:43713]

2002-05-10 Thread BELAIKS Ep-Ng-Ist
Could you please help us with the url or paths to those cisco docs you used. Thanks and best regards. Joe ashish Sent by: [EMAIL PROTECTED] 05/09/2002 01:14 PM AST Please respond to ashish To: [EMAIL PROTECTED] cc: bcc: Subject: Re: Recommended study books for CCNP routing (BSCN) [7:43713]

Re: why I can't use normal ping in new router??? [7:43709]

2002-05-10 Thread Kenny Smith
sorry me again, I think I know why my router can't query the DNS. The reason is when I do a extended ping as follow, it tried to query the DNS server for real IP with the source address of the serial0 (default) before we can specify to use ethernet0 as the source address. And ISP never

Re: why ip inspect block my traffic? [7:43802]

2002-05-10 Thread Steven A. Ridder
IP inspect is the IOS based FW. It looks at packets that go through router, and depending on your config, let it through or not. -- RFC 1149 Compliant. Get in my head: http://sar.dynu.com Kenny Smith wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi.. Can you tell me what

RE: pix access-list [7:43595]

2002-05-10 Thread Ufuk Yasibeyli
The statement below does not sound correct. Please check the following link : http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/config/ mngacl.htm (watch for line wrap) It says : Allowing Inbound Connections By default, the PIX Firewall denies access to an internal or

NAT configuration for 2 service providers [7:43820]

2002-05-10 Thread brahmam lv
Hi Friends, I have 2 Internet links working at present. One link terminated on Cisco router and another link terminated on Telindus Crocus router ( which doesnt have NAT functionality) To facilitate internet access i have configured NAT on Cisco with overload, for second i have installed Windows

Designing a enterprise ,by Application not user [7:43614]

2002-05-10 Thread steve skinner
Hi i am int the proccess of re-designing a network for 1,000 users over 4 sites , in 1 city. and for the Lan`s themselfs i am thinking of changing my approch i usually follow all the standard design principal`s laid down by Miss P , and Mr H..( MANY THANKS..)but i am interested in changing

Re: CCIE communication and services [7:43714]

2002-05-10 Thread Jason Owens
Sorry, I guess that wasn't very clear. Suppose you attain an R/S CCIE and now wish to go for security or C/S. As the lab is the same for all three, is it necessary to keep retaking the lab or will the written be enough? I assume you probably do have to take the lab again, however since it is the

RE: dual-homed hosts problems [7:43677]

2002-05-10 Thread Jeffrey Reed
I just talked to someone yesterday who said they are running OSPF on the WIN2000 servers and using dual NICs effectively. Is this a better way to dual home servers? Jeffrey Reed Classic Networking, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of

RE: Give up...Cannot ping from one spoke to another?? [7:43795]

2002-05-10 Thread Greene, Patrick
If are not using the ip ospf network command, then how are you advertising your routes, static route and then redistrubute static within OSPF? When you do a show routes on one of the hub routers, are you seeing the routing table for all network in your WAN or just the 2 network that router is

RE: Give up...Cannot ping from one spoke to another?? [7:43795]

2002-05-10 Thread Rogell, Dennis
Iam a little late on this thread, first of all put your neighbor statement on the hub only pointing to the spokes. Next configure map statements from the spokes to the hub and to the other spokes and you should be okay. You should not have to change your network statement because by default a

RE: NAT configuration for 2 service providers [7:43820]

2002-05-10 Thread Kent Hundley
You can find lots of good info on Cisco NAT by surfing to cisco.com and searching for NAT tips. Here's a shortcut: http://www.cisco.com/warp/public/556/index.shtml And here's an example to help with your specific question: http://www.cisco.com/warp/public/105/nat_routemap.html This

IP Based DLSAM [7:43827]

2002-05-10 Thread Greene, Patrick
Does Cisco offer a IP based DSLAM that does not require ATM? All of the current solutions I can find, like the 6260, are all IP+ATM. We have a Gig MAN in place and do not want to overlay an ATM infrastructure just to connect DSLAMs. We would like to just put a DSLAM in place, connect it via

RE: why ip inspect block my traffic? [7:43802]

2002-05-10 Thread Kent Hundley
The command you reference is for context-based access control (cbac), part of the firewall feature set (ffs). What it is and how it works are clearly explained in the cisco documentation at cisco.com. Here's a shortcut link that gives you all the basics:

Re: NAT configuration for 2 service providers [7:43820]

2002-05-10 Thread John Huston
Overload it by port so you are doing PAT instead of NAT. Is NAT a requirement? If so then create a second pool however it cannot be the same ip addresses as the first pool. Perhaps you could layout your objective with a little more detail. brahmam lv wrote in message [EMAIL

Re: encapsulation failure on an 806 router [7:43813]

2002-05-10 Thread John Huston
cut and paste your config in here so we can see what are doing. Dimitrije wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Got an 806 router with two Ethernet interfaces used for broadband access to the Internet. Ethernet 1 is typically the WAN interface pointing towards the

Tag Switching [7:43830]

2002-05-10 Thread James
Hello all This is a rephrase of my previous question on MPLS. Does anyone know if it is possible to use Tag-switching on 2500 platforms ? I have tried using tag-switching ip interface command on 2511s on a test lab but the command is not available. Is there a different IOS version that I need,

Re: IP Based DLSAM [7:43827]

2002-05-10 Thread MADMAN
I'm 99% sure Cisco doesn't have any such thing though I bounce this off a DSL guy and he thought Cisco may be looking at something along those line. You may want to ping your local SE. Dave Greene, Patrick wrote: Does Cisco offer a IP based DSLAM that does not require ATM? All of the

Re: IP Based DLSAM [7:43827]

2002-05-10 Thread Davide Ferrari
The 6260 IS basically an ATM switch. The IP functionalities are related to MPLS/VPN (Cell mode, or frame mode over VP), PPP termination (PPPoA, PPPoE, L2X tunnelling...) and ip routing (Eigrp, OSPF, ISIS, Rip, MP-BGP). As wan interface it doesn't have a Giga Ethernet or POS. It has only ATM

RE: CCIE communication and services [7:43714]

2002-05-10 Thread Roberts, Larry
Only one small flaw in logic. The labs are NOT the same. The security lab only has IP routing , but it also includes a PIX firewall as well as IDS and IOS FW problems. Those are not present in the RS lab ( Or at least this is what Im told, I haven't actually been to the lab. 45 days and counting

RE: Tag Switching [7:43830]

2002-05-10 Thread Cohen, Michael
I don't believe it is possible to run MPLS or Tag-Switching on the 2500's. I purchased a few 4500M's pretty cheap which support most MPLS/Tag-Switching features. Otherwise it's the 2600's and up... -Michael Cohen -Original Message- From: James To: [EMAIL PROTECTED] Sent: 5/10/02 10:22

RE: CCIE communication and services [7:43714]

2002-05-10 Thread Jason Owens
OK. I have no idea if the labs are the same or not. I was basing my question on the earlier post. The deal is, you pass one of 8 possible writtens (although only 4 are available as of today), which consist of 50% general knowledge material, and the other 50% of subject-specific material, where

ISP Topology Design [7:43836]

2002-05-10 Thread Chris Headings
Hello all! Does anyone know of any books/material that would be geared more toward ISP network design? Looking for as much as I can find... Thanks Chris Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=43836t=43836 -- FAQ, list

Re: BGP Nexthop attribute propagation using RR [7:43730]

2002-05-10 Thread Kent Yu
Peter, Seems to me, according to this: http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/120newft/120 limit/120st/120st16/st_bgpnh.htm#xtocid188001 next-hop can be rewrote across IBGPs. I agree that the 2500 is doing something wrong, as the normal neighor based next-hop should

RE: CCIE communication and services [7:43714]

2002-05-10 Thread Sean Knox
The lab is not the same for all three. As nrf has repeatedly tried to tell you, they are three SEPARATE tracks. To achieve the R/S CCIE, you need to pass the R/S written and the R/S CCIE Lab. To get your C/S CCIE, even if you already have, say, you R/S CCIE *completed*, you still need to complete

Re: CID Test wonderings [7:43678]

2002-05-10 Thread [EMAIL PROTECTED]
Just wondering...was this the new format or the old? Regards, Frank Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=43839t=43678 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report

Re: ISP Topology Design [7:43836]

2002-05-10 Thread MADMAN
Internet Routing Architectures 2nd edition would be one. Dave Chris Headings wrote: Hello all! Does anyone know of any books/material that would be geared more toward ISP network design? Looking for as much as I can find... Thanks Chris -- David Madland Sr. Network Engineer

Re: dual-homed hosts problems [7:43677]

2002-05-10 Thread Maximus
I may be wrong but your friend is using a routing protocol and therefore the below would not apply to the scenario. As for running SOP on the server IMHO it would be overkill for this specific situation. Keep it simple. Would I run SOP on a server? Depends on why I had the server built in the

Re: dual-homed hosts problems [7:43677]

2002-05-10 Thread Maximus
Sorry list members, the spell-checker changed OSPF to SOP. - Original Message - From: Maximus To: Sent: Friday, May 10, 2002 12:40 PM Subject: Re: dual-homed hosts problems [7:43677] I may be wrong but your friend is using a routing protocol and therefore the below would not apply

What to do........ 2 parts [7:43843]

2002-05-10 Thread Kleberg, Jason
this is a 2 part question that I hope to hear everyone's opinion on. 1. What to do next? Im done with ccnp, is it worth it to move to ccda\dp, what about css1, or just shoot for the ccie. i know that ccie will cost the most by far, and the others could give me more of a foundation to build on

Need help on crtl-shift-6 [7:43844]

2002-05-10 Thread Kenneth Yeung
I found it difficult to use crtl-shift-6 to get back the terminal server. Sometimes okay but sometimes not! Can anyone help me? Can I change this with a simplier key? Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=43844t=43844

RE: ISP Topology Design [7:43836]

2002-05-10 Thread Mike Bernico
I've recently gone through a redesign of a large ISP. There are excellent best practices types of ideas on NANOG's website in the form of old presentations. If you have any specific questions I can try to answer them. --- Mike Bernico [EMAIL PROTECTED]

Re: CCIE communication and services [7:43714]

2002-05-10 Thread nrf
Allright. Sean Knox has pretty much nailed it on the head. But let me try one more time. To become a R/S CCIE you must #1) pass the R/S written #2) pass the R/S lab To become a Security CCIE you must #1)pass the Security written #2) pass the Security lab To become a C/S CCIE you must #1)Pass

Re: why I can't use normal ping in new router??? [7:43709]

2002-05-10 Thread Priscilla Oppenheimer
Maybe the DNS replies can't back to the source either? I notice that the router hasn't give you a chance yet to say that it should use e0 as source instead of s0. Can you ping the DNS server from the router? Do you have to make sure to use e0 as the source to successfully ping the DNS server?

Re: why I can't use normal ping in new router??? [7:43709]

2002-05-10 Thread Priscilla Oppenheimer
At 04:20 AM 5/10/02, Kenny Smith wrote: sorry me again, I think I know why my router can't query the DNS. The reason is when I do a extended ping as follow, it tried to query the DNS server for real IP with the source address of the serial0 (default) before we can specify to use ethernet0 as the

Re: Recommended study books for CCNP routing (BSCN) [7:43713]

2002-05-10 Thread ashish
Could you please help us with the url or paths to those cisco docs you used. Thanks and best regards. Joe ashish Sent by: [EMAIL PROTECTED] 05/09/2002 01:14 PM AST Please respond to ashish To: [EMAIL PROTECTED] cc: bcc: Subject: Re: Recommended study books for CCNP

Re: dual-homed hosts problems [7:43677]

2002-05-10 Thread Priscilla Oppenheimer
At 12:35 PM 5/10/02, Maximus wrote: Sorry list members, the spell-checker changed OSPF to SOP. I think OSPF should be SOB. Just kidding! :-) Priscilla - Original Message - From: Maximus To: Sent: Friday, May 10, 2002 12:40 PM Subject: Re: dual-homed hosts problems [7:43677] I may

Re: Cisco Certification Digest V2 #2068 (Vacation) [7:43860]

2002-05-10 Thread Stephen Siu
I will be on vacation from 5-7-02 to 5-22-02. Any matter regarding network management please forward to Bob Taylor @ 213-979-0032. Thanks. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=43860t=43860 -- FAQ, list archives, and

Re: Give up...Cannot ping from one spoke to another?? [7:43795]

2002-05-10 Thread Cisco Nuts
That's the catch.I am not allowed to use the fr map statements pointing from one spoke to another.( as I mentioned in my initial mail). That obviously would work!! :-) Would you know of any way? I just cannot find the answer!! From: eejioforManny To: Cisco Nuts Subject: Re: Give

RE: Give up...Cannot ping from one spoke to another?? [7:43795]

2002-05-10 Thread Cisco Nuts
No, I have not used the ip ospf network command on the spokes or the hub. All I have is 1 FR map statement and 1 neighbor statement on each spoke pointing to the hub rtr. Yes, the hub is the DR(with the command #neigbor 10.10.1.1 priority 2 on the spokes) NO, no redistribution of routes

RE: Give up...Cannot ping from one spoke to another?? [7:43795]

2002-05-10 Thread Cisco Nuts
Yes, policy routing could very well be the solution without using FR map statements. But how would I go about doing this? I mean what kind of policy routing needs to be in place on the spoke so that I can ping to the other spoke (going thru the Hub rtr). And thus, get to the Ethernets of the

RE: ISP Topology Design [7:43836]

2002-05-10 Thread Greene, Patrick
Check out the Tech Talk at http://forums.cisco.com/eforum/servlet/NetProf?page=Emerging_Technologies_discussion on Internet Data Center Design...it may be of some use. Patrick -Original Message- From: Chris Headings [mailto:[EMAIL PROTECTED]] Sent: Fri

RE: Need help on crtl-shift-6 [7:43844]

2002-05-10 Thread Marko Milivojevic
I found it difficult to use crtl-shift-6 to get back the terminal server. Sometimes okay but sometimes not! Can anyone help me? Can I change this with a simplier key? You can set it to escape by doing this: line vty 0 4 escape-character 27 ! Same apples if you want to

RE: why ip inspect block my traffic? [7:43802]

2002-05-10 Thread Don Nguyen
You need to apply your IP inspect in the opposite direction of your external interfaces ACL. So, if you have an ACL applied inbound on your external interface you need to apply your IP Inspect list outbound. The reason being, CBAC will inspect your outbound packets and then dynamically insert

Re: Need help on crtl-shift-6 [7:43844]

2002-05-10 Thread Joupin
Hi , you should press ctrl+shift+6+x many times Kenneth Yeung wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... I found it difficult to use crtl-shift-6 to get back the terminal server. Sometimes okay but sometimes not! Can anyone help me? Can I change this with a simplier

Re: Give up...Cannot ping from one spoke to another?? [7:43795]

2002-05-10 Thread Scott H.
Define an acl on each spoke with all of the remote networks ie: access-list 100 permit any (ip of remote network) Do this for each of the remote networks. Then define a route map matching on that access list and set the next hop to the ip of the hub router. Apply to the outgoing serial

RE: dual-homed hosts problems [7:43677]

2002-05-10 Thread Rah Hussain
Priscilla, That's not very lady like ;-) Just kidding too :-) Rah -Original Message- From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]] Sent: 10 May 2002 17:58 To: [EMAIL PROTECTED] Subject: Re: dual-homed hosts problems [7:43677] At 12:35 PM 5/10/02, Maximus wrote: Sorry list

ws-x6516-GE-TX: Auto discovery X-over? [7:43876]

2002-05-10 Thread Jeffrey Reed
We were playing with a WS-X6516-GE-TX in the lab and someone used a cross-over cable to connect a PC. We received a LINK, even though it was PC-to-switch. We had the same results with a straight patch cable. Can any confirm these are auto sensing transmit and receive pairs of a CAT5 cable and

Re: ISP Topology Design [7:43836]

2002-05-10 Thread Howard C. Berkowitz
Hello all! Does anyone know of any books/material that would be geared more toward ISP network design? Looking for as much as I can find... Thanks My new book, Building Service Provider Networks from Wiley, should be in bookstores around Memorial Day. I don't yet have the ISBN. It

RE: dual-homed hosts problems [7:43677]

2002-05-10 Thread Priscilla Oppenheimer
Sob as in cry! OSPF makes me cry. ;-) At 07:15 PM 5/10/02, Rah Hussain wrote: Priscilla, That's not very lady like ;-) Just kidding too :-) Rah -Original Message- From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]] Sent: 10 May 2002 17:58 To: [EMAIL PROTECTED] Subject: Re:

Re: Tag Switching [7:43830]

2002-05-10 Thread [EMAIL PROTECTED]
Not supported. Eric Lange 651-205-1329 James cc: Sent by: Subject: Tag Switching

RE: Give up...Cannot ping from one spoke to another?? [7:43795]

2002-05-10 Thread Tom Petzold
If you don't have map statement at the spokes this will not work. Basically what you are missing is the layer 2 to layer 3 mapping. Just like ARP on ethernet the router needs to map a layer 3 address to a layer 2 address. In this case you do it with a map statement which links the IP address

RE: ISP Topology Design [7:43836]

2002-05-10 Thread Chris Headings
Thanks to everyone!!! Chris Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=43880t=43836 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to

RE: Give up...Cannot ping from one spoke to anothe [7:43795]

2002-05-10 Thread Rob Ehlers
Sounds like bootcamp lab #1 to me... heh. Try policy-based routing on the frame interfaces of the spokes. You want it to change the next hop to point back to the hub router's IP... Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=43808t=43795

Re: CCIE communication and services [7:43714]

2002-05-10 Thread CiscoB
Cool, I didnt know the ISP Dial qualification exam applied to the CS lab exam. I'll have to schedule the CS lab exam then. Anyone else taking it? thanks, -Brad Ellis CCIE#5796 (RS / Security) Network Learning Inc [EMAIL PROTECTED] www.optsys.net (Cisco hardware) nrf wrote in message [EMAIL

RE: Give up...Cannot ping from one spoke to anothe [7:43795]

2002-05-10 Thread Nikolay Nikolov
The ping problem is not related to the routing or OSPF protocol. Trying to ping remote IP over FR with no frame map statement will cause of encapsulation failure. The router doesn't know how to encapsulate the IP packet in DLCI number. Since you can not use frame map statement, the only option

RE: ISP Topology Design [7:43836]

2002-05-10 Thread Chris Headings
Thanks!!! We are an ISP in So. Cal. We are gearing up to open other offices in bewteen Arizona and Ca... We are trying to decide what would be the best way of intergrating our ISP network...like... Should we just continue to use our one ASN and have all traffic come back to the Global NOC, or

RE: dual-homed hosts problems [7:43677]

2002-05-10 Thread Rah Hussain
Oh I see hehehe Rah -Original Message- From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]] Sent: 10 May 2002 19:43 To: [EMAIL PROTECTED] Subject: RE: dual-homed hosts problems [7:43677] Sob as in cry! OSPF makes me cry. ;-) At 07:15 PM 5/10/02, Rah Hussain wrote: Priscilla,

ios question? [7:43882]

2002-05-10 Thread GEORGE
I use Cisco routers and switches throughout my hole network,. I been learning as I go and read the posts here so far I feel confident in operating certain hardware models .However, we I have a need to understand more is the ios, from what I read so far each model and depending on what you

RE: dual-homed hosts problems [7:43677]

2002-05-10 Thread gragido
LOL. OSPF is a wonderful thing, remember that life has a funny way of punishing those who can't recognize its little gifts, you could be working with IS-IS . -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Priscilla Oppenheimer Sent: Friday, May 10,

Re: ws-x6516-GE-TX: Auto discovery X-over? [7:43876]

2002-05-10 Thread MADMAN
I think the issue is not the link, you can get a link light with either, it the tx-tx, rx-rx that is the problem with the wrong cable. IOW the wire responsible for link doesn't change. Dave Jeffrey Reed wrote: We were playing with a WS-X6516-GE-TX in the lab and someone used a

Re: encapsulation failure on an 806 router [7:43813]

2002-05-10 Thread dj
It is actually very basic. If someone can run this test on their Cisco 806 and report their findings. I can see the problem by just doing the following: erase startup-config reload assign IP addresses to both Ethernet interfaces connect my laptop to E0 (4 port LAN hub) connect ISP router to E1

Re: Cisco Certification Digest V2 #2069 (Vacation) [7:43886]

2002-05-10 Thread Stephen Siu
I will be on vacation from 5-7-02 to 5-22-02. Any matter regarding network management please forward to Bob Taylor @ 213-979-0032. Thanks. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=43886t=43886 -- FAQ, list archives, and

Re: ios question? [7:43882]

2002-05-10 Thread Craig Columbus
Go to Cisco's website. There's a link called the ABC's of IOS. I'm sure there's more than you'd ever want to know here: http://www.cisco.com/warp/public/732/abc/ Regards, Craig At 03:11 PM 5/10/2002 -0400, you wrote: I use Cisco routers and switches throughout my hole network,. I been

Re: ios question? [7:43882]

2002-05-10 Thread Kent Yu
George, http://www.cisco.com/warp/customer/620/1.html http://www.cisco.com/kobayashi/support/tac/t_index.shtml looking for Software Advisor You can always open a ticket with TAC to make sure you are choosing the right/recommended version. HTH Kent - Original Message - From: GEORGE

R/S recert [7:43890]

2002-05-10 Thread John Conzone
Any sites, boards or study material for the CCIE R/S recert written tests? Seems like an area thatno one has got covered. Thanks! Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=43890t=43890 -- FAQ, list archives, and subscription

CCIE Written Practice Questions [7:43891]

2002-05-10 Thread Mark Godfrey
Can somebody recommend some good CCIE pratice questions. Preferably low cost as my company won't help pay for it. MG Network Engineer RoadRunner High Speed Online Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=43891t=43891 --

CCIE Written Practice Questions [7:43893]

2002-05-10 Thread Mark Godfrey
Can somebody recommend some good CCIE pratice questions. Preferably low cost as my company won't help pay for it. MG Network Engineer RoadRunner High Speed Online Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=43893t=43893 --

Re: ISP Topology Design [7:43836]

2002-05-10 Thread Irwan Hadi
On Fri, May 10, 2002 at 02:40:13PM -0400, Howard C. Berkowitz wrote: Hello all! Does anyone know of any books/material that would be geared more toward ISP network design? Looking for as much as I can find... Thanks My new book, Building Service Provider Networks from Wiley,

CCNP604-503 ( Routing Exam) [7:43895]

2002-05-10 Thread rtiwari
Hi Folks, Next week I am going to give my CCNP Routing (640-503) exam.Please give me your suggestion like which area should I concentrate more. Thanks Ravi Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=43895t=43895 -- FAQ, list

PIX 501 Ver 6.1 [7:43896]

2002-05-10 Thread Jablonski, Michael
I'm trying to configure ethernet 2-4 on a PIX 501 (3DES), but it comes back saying only 2 interfaces are active. When I do a show version it say maximum interfaces: 2 Am I missing something or what? Please lemme know!!! Thanx, mkj ~~~ Michael Jablonski ABN AMRO

Re: ISP Topology Design [7:43836]

2002-05-10 Thread dre
There were some really good answers to this question. In particular, I liked the person who mentioned the NetPro IDC design session (Cisco's SRND's are also really good). Howard's new book will be interesting to check out. His other suggestions of checking out NANOG, RADB, RIPE, etc are also

Re: ISP Topology Design [7:43836]

2002-05-10 Thread Howard C. Berkowitz
On Fri, May 10, 2002 at 02:40:13PM -0400, Howard C. Berkowitz wrote: Hello all! Does anyone know of any books/material that would be geared more toward ISP network design? Looking for as much as I can find... Thanks My new book, Building Service Provider Networks from

RE: PIX 501 Ver 6.1 [7:43896]

2002-05-10 Thread Paul Jin
If you have a PIX 501, it only has 2 interfaces. There are some additional RJ-45 ports, but that is not configurable, they are more or less built in switch ports... 0 = outside 1 = inside 2-4 = ports so you can attach PCs directly into the firewall. - Paul Message Posted at:

easy VPN tutorial ... [7:43901]

2002-05-10 Thread Paul Doyle
Does anyone know of any websites with an easy to follow guide, or easy steps for creating 'client to Pix VPN' ??? I'm having difficulty setting this up ... I've even tried PPTP with no authentication without success ... I am using ver 6.1 for the Pix and 3.5 for the Cisco VPN client ... Any

DDR [7:43902]

2002-05-10 Thread PING
1. I want to configure DDR on 2600/3600 back-to-back: Router-ADDR--Router-B What BRI modules do I need? 2. I have this setup; Analog Phone---Router-A--BRI--Router-B-Analog Phone Both analog phones connected to VIC-2FXS in NM-2V Router A has VIC-2BRI-S/T-TE and

RE: ISP Topology Design [7:43836]

2002-05-10 Thread Howard C. Berkowitz
At 2:53 PM -0400 5/10/02, Chris Headings wrote: Thanks!!! We are an ISP in So. Cal. We are gearing up to open other offices in bewteen Arizona and Ca... We are trying to decide what would be the best way of intergrating our ISP network...like... Should we just continue to use our one ASN and

Re: 1924 Switch: Takes long time to ping device after [7:43903]

2002-05-10 Thread Dallas
The port will take upto 50 seconds to come up. This is due to Spanning Tree Protocol. The switch is making sure you do not have a switching loop. For all the switch ports that are attached to and end node (workstation, printer..etc) you should enable PortFast. Then the port will come up in a

Re: ISP Topology Design [7:43836]

2002-05-10 Thread Jeff Harris
If you are going to have local uplinks in your other locations (and it is not just a hub-and-spoke design with no need for internet redundancy), then I would run the same ASN throughout, use BGP Confederations (maybe not, depending on the number of uplinks, routers and your client's transport

Re: ISP Topology Design [7:43836]

2002-05-10 Thread dre
Chris Headings wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... We are an ISP in So. Cal. We are gearing up to open other offices in bewteen Arizona and Ca... We are trying to decide what would be the best way of intergrating our ISP network...like... Should we just continue

Re: URGENT: Router crashes frequently [7:43711]

2002-05-10 Thread PING
First, the traceback -Traceback= 60EC68D4 60EDD6B8 60EC74E0 60EBD4CC 60E9FE34 60EADCE8 6043407C 60434068 can be decoded by symbol files by Cisco and that will pin point what the problem is. When you say Flash you mean the external PCMCIA flash card, right? It is used only during the boot

Re: What to do........ 2 parts [7:43843]

2002-05-10 Thread Peter Walker
Jason Being as I am in a similar position to you in that I have completed all of the exams for CCNP (still awaiting results from support beta exam) I can tell you what I am have been doing and am planning. I will let you decide if this is relevent or useful to you. 1) First of all as I have

RE: easy VPN tutorial ... [7:43901]

2002-05-10 Thread Mark Odette II
If your VPN Client is behind a Router, such as a DSL/Cablemodem Router for the home, you will need to make sure that the device allows NAT, and you configure a static map from a public IP to the private IP of the host in question. Otherwise, you will experience the problems your describing.

RE: PIX 501 Ver 6.1 [7:43896]

2002-05-10 Thread Roberts, Larry
On the 501 it only has 2 interfaces. The inside and the outside. The other 4 ports are switch ports and they are not configurable. Thanks Larry -Original Message- From: Jablonski, Michael [mailto:[EMAIL PROTECTED]] Sent: Friday, May 10, 2002 4:44 PM To: [EMAIL PROTECTED] Subject:

RE: CCNP604-503 ( Routing Exam) [7:43895]

2002-05-10 Thread Tim Potier
Buy the Cisco Press BSCN book... it has more information than you will need, but worth the price. BUT, since you are taking the exam next week, I doubt you have time to read the entire book... so I would go to CCO and look at the exam outline, and cram from online resources. Message Posted at:

Re: PIX 501 Ver 6.1 [7:43896]

2002-05-10 Thread CiscoB
Those ports are switched ports of the inside interface. Envision those four ports as being a single port representing the inside interface. So you only have (2) interfaces avaiable (the inside and the outside). thanks, -Brad Ellis CCIE#5796 (RS / Security) Network Learning Inc [EMAIL PROTECTED]

Re: ISP Topology Design [7:43836]

2002-05-10 Thread Howard C. Berkowitz
At 6:32 PM -0400 5/10/02, dre wrote: Chris Headings wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... We are an ISP in So. Cal. We are gearing up to open other offices in bewteen Arizona and Ca... We are trying to decide what would be the best way of intergrating our ISP

Re: R/S recert [7:43890]

2002-05-10 Thread CiscoB
If you are going the security recert route, I can help you there. thanks, -Brad Ellis CCIE#5796 (RS / Security) Network Learning Inc [EMAIL PROTECTED] www.optsys.net (Cisco hardware) John Conzone wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Any sites, boards or study material

RE: MCNS exam material [7:43505]

2002-05-10 Thread Tim Potier
The book is MORE than enough. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=43912t=43505 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to

Policy Routing Resources.. [7:43915]

2002-05-10 Thread B Rudy
Hey guys, If anybody has any good links or reading material on Policy routing please respond to this posting. I really want to get it down. Ive searched everywehere and found about 3 links on the Cisco Website with pertinent information. If anybody knows where i can find all about policy

Re: ISP Topology Design [7:43836]

2002-05-10 Thread Howard C. Berkowitz
At 6:32 PM -0400 5/10/02, dre wrote: Chris Headings wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... We are an ISP in So. Cal. We are gearing up to open other offices in bewteen Arizona and Ca... We are trying to decide what would be the best way of intergrating our ISP

Re: ISP Topology Design [7:43836]

2002-05-10 Thread JP
dre wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... You also might want to check out Barry Greene / Philip Smith's new CiscoPress book, Cisco ISP Essentials and the website, http://www.ispbook.com/ I heard the book is partially based on the papers from this link:

RE: PIX 501 Ver 6.1 [7:43896]

2002-05-10 Thread Mark Odette II
Or from a different perspective... even though it may not be technically correct... consider the Inside interface to be a Virtual or Logical interface, rather than a Physical Interface. Is that safe to say?!?! ... and this only applies to the PIX 501. Mark -Original Message- From:

Re: GRE vs. IPIP tunnels [7:43744]

2002-05-10 Thread suaveguru
Using Gre allows one to encapusulate multiple protocols across the tunnel . regards, Jason Yee --- ira wrote: Hallo list, What is the difference btw. GRE tunnel and IP-IP tunnel? Why should I use one and not the other and when? I am currently using GRE tunnels . Thanks.

Re: Committed Access Rate [7:43757]

2002-05-10 Thread Chris Camplejohn
If you want good voice, then don't burst above CIR...otherwise, provider is allowed to throw away the packets...He has no idea which are voice and which are data. You absolutely don't want your voice packets dumped or your voice quality will suffer. You should look at LLQ. Apply inside CBWFQ.

RE: VUE vs Sylvan [7:43579]

2002-05-10 Thread Lou
Same pool of questions... So does not matter I was ready to use VUE but they have hard and fast rules regarding rescheduling... I missed my scheduled CCIE test (Death in Family) and ask for a reschedule date at THEIR discretion... I was told my personal problem was not their problem!

Transcender Avaiable[tran1@post.com] [7:43923]

2002-05-10 Thread tran1 t
hi i have the following transcender,troytech,ucertify,cheetsheet,boson,learnkey if you need it mail me [EMAIL PROTECTED] company exam no: product name Cisco 640-507 AssociateCert 2.0 Cisco 640-505 RemoteAccessCert 1.0 Cisco 640-503 RoutingCert 1.0 Cisco 640-506 SupportCert 1.0

  1   2   >