Re: show version? [7:45730]

2002-06-04 Thread [EMAIL PROTECTED]
Yeah but if you need to know the serial number for some reason and you don't have access to records, Mike's comments really do the trick. Brian Sent by: [EMAIL PROTECTED] 06/04/2002 02:37 PM Please respond to Brian To: [EMAIL PROTECTED] cc: Subject:

RE: show version? [7:45730]

2002-06-04 Thread Mark Odette II
Not that I really care, but... it's Mark, not Mike, just for clarification sake :) (Big Grin and Smirk) It's late (1:45am)... and I need to get to bed, rather than trying to catch up on the last 3 days-worth of posts. (I participate on the list the same way Priscilla does... via SMTP ;-) )

2v Voice card [7:45747]

2002-06-04 Thread Amir Aziz
Hello Everyone, I am having problems with my Cisco router the router fails to recognise the card and the en light intially shows red when the router boots then it turns off and remains off and the FXO and FXS card red lights remain lit. my IOS version is as follows Cisco Internetwork Operating

RE: 2v Voice card [7:45747]

2002-06-04 Thread Phil Lorenz
You need @ least 12.0(5)T software and preferably you'd want something in the 12.1 line-up... and if you have onboard memory, regular Enterprise encompasses the voice stuff starting in 12.1. All the best !!! Phil -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On

Re: VPN Overhead [7:45719]

2002-06-04 Thread [EMAIL PROTECTED]
What is the bandwidth of you DSL? Elijah Savage Sent by: [EMAIL PROTECTED] 06/04/2002 11:47 AM Please respond to Elijah Savage To: [EMAIL PROTECTED] cc: Subject:Re: VPN Overhead [7:45719] We have 2 3030 concentrators setup in a load balancing

Dialback problem [7:45749]

2002-06-04 Thread Shane Stockman
I have a problem with isdn dialback in that when you dial in it cuts you off but you wait until the call cuts off.Analog dialback works fine on the same router. Here is a config ,maybe some one can see some thing I cannot: IOS (tm) 3600 Software (C3640-IS-M), Version 12.1(5)T6, RELEASE

RE: CAT 5000 simulator for BCMSN [7:45735]

2002-06-04 Thread Ole Drews Jensen
Sure Hitesh, That would be my simulator, found on my RouterChief site under Free Software. Good luck, Ole ~ Ole Drews Jensen Systems Network Manager CCNP, MCSE, MCP+I RWR Enterprises, Inc. [EMAIL PROTECTED] ~

RE: show version? [7:45730]

2002-06-04 Thread brian kastor
or the guy that was hired two years after 24 2610's went out to their sites. these guys wrote down the serial numbers, they just don't know which ones go with which ones!!! Thanks for the replies everyone! bk Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=45752t=45730

Re: Security hazard?? [7:45731]

2002-06-04 Thread Craig Columbus
Do I understand you correctly that your 6808s have both internal (secure) and external (unsecure) traffic on them, separated only by VLAN? At 09:30 PM 6/3/2002 -0400, you wrote: All, We have two 3640's and two Extreme Black Diamond 6808's (aka 6509's). The two 3640's are doing IBGP between

Chassis Serial Number - WAS show version? [7:45730]

2002-06-04 Thread Daniel Cotts
Some while ago someone posted the idea of using a named access-list and remark to record the serial number. Obviously it is not applied to any interface. ip access-list standard Serial_Number remark This router's S/N JAB035x -Original Message- From: Mark Odette II [mailto:[EMAIL

Cisco Remote Shell [7:45757]

2002-06-04 Thread Michalis Palis
Hello all I am trying to send commands to a cisco router using remote shell from a unix machine. My problem is that i con not send configuration commands, but only show commands. When i send configuration commands i.e config t, ip finger i get a reply with permition denied. Can anybody has an

RE: Security hazard?? [7:45731]

2002-06-04 Thread Robert A. McIntire
If I understand what you're describing, it sounds like you've pretty well by-passed the firewall. As a general comment, it seems pointless to have a firewall if you're not going to utilize it with sound network security design. I think I understand what you're trying to do, but you may want to

Seems to me... [7:45664]

2002-06-04 Thread Chris Charlebois
The error says the source and destination are the same. Since the source and destination ip addresses are obviously different, I would guess the complaint is that the last-hop and next-hop gateways are the same. The IDS is complaining because some packets are trying to hairpin in your router.

Re: static route for port 21 [7:45682]

2002-06-04 Thread Alex Lee
Yes, I do remember seeing that thread when I first joined the group. Just can't find it now. Daniel Cotts wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Time to restart the blueberry thread. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=45759t=45682

RE: Security hazard?? [7:45731]

2002-06-04 Thread Peter van Oene
Assuming the untrusted VLAN offers no IP connectivity to it's control engine (ie the routed aspects are not reachable therein) what vulnerabilities exist here? With no routing on the VLAN, I'm not exactly sure how one gets from untrusted to trusted without traversing the Firewall. The only

Re: Dropping Characters on Reverse Telnet [7:45729]

2002-06-04 Thread Shawn Heisey
Every character that is processed by an AUX port creates an interrupt, so the AUX port hits the CPU harder than any other port running at the same speed. CPU utilization at 35% shouldn't be enough to cause the problem you're seeing. One thing you'd want to make sure of is that you are not

RE: Security hazard?? [7:45731]

2002-06-04 Thread Eric Rivard
if you do not have Ip routing on the VLANs you can still hope from one VLAN to another. See this artical for more info: http://www.sans.org/newlook/resources/IDFAQ/vlan.htm -Original Message- From: Peter van Oene [mailto:[EMAIL PROTECTED]] Sent: Tuesday, June 04, 2002 8:41 AM To: [EMAIL

RE: SYSLOG time stamp problem [7:44949]

2002-06-04 Thread dayo olabisi
service timestamps log datetime msec localtime show-timezone (watch the wrap). keywords to note: localtime show-timezone dayo --- R. Benjamin Kessler wrote: I know on RedHat you have to ensure that syslogd is started with the -r flag so that it accepts syslog messages from remote systems.

RE: Security hazard?? [7:45731]

2002-06-04 Thread Peter van Oene
Interesting indeed. I hadn't seen that before. This is obviously an architecturally flawed implementation. Ideally, the CAM (MAC) table should be fully isolated to prevent unwanted forwarding and ports not considered trunks shouldn't accept tagged packets. I assume folks are working on

Cisco Remote shell [7:45765]

2002-06-04 Thread Michalis Palis
Hello all I am trying to send commands to a cisco router using remote shell from a unix machine. My problem is that i con not send configuration commands, but only show commands. When i send configuration commands i.e config t, ip finger i get a reply with permition denied. Can anybody has an

RE: Security hazard?? [7:45731]

2002-06-04 Thread Priscilla Oppenheimer
My quick analysis of the VLAN testing published by SANs Institute: In a default configuration it is possible to inject 802.1q frames into non-trunk ports on a switch and have these frames delivered to the destination. As Peter says, a non-trunk port shouldn't accept a tagged frame. Also, it

Re: Cisco Remote shell [7:45765]

2002-06-04 Thread Priscilla Oppenheimer
Did you try the enable command to get into privileged mode? Do you have the enable password? Being able to enter only show commands is a symptom that you are still in user mode. Priscilla At 01:31 PM 6/4/02, Michalis Palis wrote: Hello all I am trying to send commands to a cisco router using

RE: Security hazard?? [7:45731]

2002-06-04 Thread Rik Guyler
Pete, bear in mind that this document is 2 years old. The IOS version on the switch was 11.2. Anybody care to speculate on how much has changed since 11.2? How about the changes in Dot1Q since then? Nonetheless, I don't get a warm and fuzzy feeling with separating external and internal

RE: Security hazard?? [7:45731]

2002-06-04 Thread Priscilla Oppenheimer
At 02:04 PM 6/4/02, Priscilla Oppenheimer wrote: My quick analysis of the VLAN testing published by SANs Institute: In a default configuration it is possible to inject 802.1q frames into non-trunk ports on a switch and have these frames delivered to the destination. As Peter says, a non-trunk

Re: VPN Overhead [7:45719]

2002-06-04 Thread Elijah Savage
The bandwidth of the dsl that the telco generously loaned us for 60 days was 608 down 128 up, that is another thing if you have a good working relation with your local telco ask them to get you a circuit for testing and they will probably do it. What is the bandwidth of you DSL? Elijah

RE: Security hazard?? [7:45731]

2002-06-04 Thread Eric Rivard
VLANs. Here is a good link to read about them: http://www.cisco.com/warp/public/473/90.shtml . According to Cisco Private VLANs can only communicate with the router. As we know, VLANs work like a logical bridge. Hosts on any VLAN can communicate with other hosts on the same VLAN (a broadcast

RE: Security hazard?? [7:45731]

2002-06-04 Thread Priscilla Oppenheimer
Also, doesn't the SANS Institute publish the papers that their certification candidates write? In other words, this may not have been written by a security guru. It may have been written by someone trying to pass the certification hurdles, one of which is the requirement to write a white

Building Service Provider Networks.. [7:45772]

2002-06-04 Thread Nigel Taylor
All, I just received my copy of Howard's latest book and I'm excited to get started reading this title. However, I'm in the midst of finishing reading his previous book, WAN Survival Guide. Interesting enough this book's Introduction states, This book focuses on the service provider network,

Re: access-list question? [7:45585]

2002-06-04 Thread Gaz
It's very possible after a few beers that I'm not thinking straight, so I won't linger on the point, but what is that wild card mask doing? 0.0.6.255 0110 Won't this work for all the odd subnets within the specified range (192.168.1.0, 192.168.3.0.192.168.7.0) If it's

Cisco Secure VPN version??? [7:45774]

2002-06-04 Thread Shoaib Waqar
Hi guys, Can anybody tell me that which version of Cisco Secure VPN client (version 1.0/1.1 OR 3.0/3.51) comes in MCNS exam. I have read the MCNS Cisco press book but i could not find enough material. Later, I was just seeing the Course Outline and found the objectives: Confguring the Cisco

Revised: Another BGP attribute question [7:45775]

2002-06-04 Thread Nigel Taylor
After posting to this thread, I realized that no one responded to my post, so I decided to figure out why? As it would seem I was lost in my understanding of RIPE-181, now RPSL and boy do I feel stupid. After spending some time reading over RIPE-181, RFC2622, and RFC2650, I do now have a much

RE: Security hazard?? [7:45731]

2002-06-04 Thread Ben Woltz
I've seen some of Cisco's private VLAN setup. The way I've seen it implemented is on a DMZ switch. Say you have 3 servers on your DMZ, web, mail, and ftp. If each of those servers is plugged into a different port on the same switch and on the same network, you can configure each of them to be

640-605 BCRAN Beta PASSED!! [7:45777]

2002-06-04 Thread Creighton Bill-BCREIGH1
I'd like to thank EVERYONE in this group. Very difficult exam! but I somehow feel prouder having passed this monster instead of the current 640-505.The scenarios and ideas presented here are better than anything seen in a lab and more diverse than anything seen in my workplace. I was wondering

SRB and NetBEUI/SMB traffic [7:45778]

2002-06-04 Thread Nelson Herron
I have an Olicom switch configured with two rings under separate TrBRFs with Win2k clients running NetBEUI attached to each ring. I have tried a couple of different methods of bridging starting with a simple SRB and then a multi-port SRB. I have source 6 1 4094 and source spanning on one To

RE: 640-605 BCRAN Beta PASSED!! [7:45777]

2002-06-04 Thread Frank Merrill
I was wondering if anyone could tell me if this will count toward the existing CCNP track if my other exams are the current standard (640-50x) in which case I'M DONE!!! Betas do indeed count, and if so, then you should be able to log into the tracking syustem and see that you are indeed

Searching for CCIE Lab scenarios [7:45754]

2002-06-04 Thread Ronald Dommelen
Hi all, Probably a frequently asked question but I'm asking it again: I'm looking for CCIE lab scenario's. I already have some books covering all the topics and issues but now I'm looking for Lab scenarios. Can somebody also perhaps tell me if the document from CCBOOTCAMP a good document is

RE: 640-605 BCRAN Beta PASSED!! [7:45777]

2002-06-04 Thread Creighton Bill-BCREIGH1
I think following any training/certification track, if done with the intent of increasing ones knowledge, is a beneficial thing if you truly increase your knowledge level. Don't do it for the paper, do it for the knowledge you'll have and the abilities you'll obtain from learning. Just wanted to

BETA exam results [7:45781]

2002-06-04 Thread Jason Viera
I recieved the results for the BCRAN beta exam, but haven't recieved a score report or seen results on the web for the Support beta I had taken. Has anyone else recieved their results for the Support beta? Any Ideas? Cisco tells me to call Prometric and Prometric tells me to call Cisco. Any help

Re: Building Service Provider Networks.. [7:45772]

2002-06-04 Thread Howard C. Berkowitz
All, I just received my copy of Howard's latest book and I'm excited to get started reading this title. However, I'm in the midst of finishing reading his previous book, WAN Survival Guide. Interesting enough this book's Introduction states, This book focuses on the service provider network,

Re: Building Service Provider Networks.. [7:45772]

2002-06-04 Thread Priscilla Oppenheimer
I read most of ISP Survival Guide by Geoff Huston. It's good, but I would imagine at a higher level than Howard's book. Higher-level as in the 1000-ft view rather than the down-in-the trenches view. Huston's book is highly technical, don't get me wrong, but I think it's more for the technical

trying to test ISDN [7:45786]

2002-06-04 Thread Lee James
Im trying to get ISDN backup to work, but as i am debugging dialer packets, I am seeing this. BRI0: Dialing cause ip (s=10.3.101.13, d=224.0.0.10) BRI0: Already 255 call(s) in progress on BRI0, dialing not allowed I have never seen this msg before. Anyone know what this means? Is there a loop

Re: Revised: Another BGP attribute question [7:45775]

2002-06-04 Thread Howard C. Berkowitz
Nigel Taylor wrote, After posting to this thread, I realized that no one responded to my post, so I decided to figure out why? As it would seem I was lost in my understanding of RIPE-181, now RPSL and boy do I feel stupid. After spending some time reading over RIPE-181, RFC2622, and RFC2650,

Re: SRB and NetBEUI/SMB traffic [7:45778]

2002-06-04 Thread Priscilla Oppenheimer
At 07:06 PM 6/4/02, Nelson Herron wrote: I have an Olicom switch configured with two rings OK, got that. under separate TrBRFs with Win2k clients running NetBEUI attached to each ring. I have tried a couple of different methods of bridging starting with a simple SRB and then a multi-port SRB.

Re: Cisco Secure VPN version??? [7:45774]

2002-06-04 Thread fahim
Hi It should be 1.0/1.1 fahim Shoaib Waqar wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi guys, Can anybody tell me that which version of Cisco Secure VPN client (version 1.0/1.1 OR 3.0/3.51) comes in MCNS exam. I have read the MCNS Cisco press book but i could not find

RE: trying to test ISDN [7:45786]

2002-06-04 Thread Frank Merrill
BRI0: Dialing cause ip (s=10.3.101.13, d=224.0.0.10) BRI0: Already 255 call(s) in progress on BRI0, dialing not allowed I have never seen this msg before. Anyone know what this means? Is there a loop somewhere? I would guess that you have EIGRP running seeing as that is the multicast

Re: SRB and NetBEUI/SMB traffic [7:45778]

2002-06-04 Thread Priscilla Oppenheimer
Should have said: int to0 source-bridge 6 1 8 int to1 source-bridge 8 1 6 (In the previous version I forgot to change one of them to to1! ;-) Priscilla At 08:43 PM 6/4/02, Priscilla Oppenheimer wrote: At 07:06 PM 6/4/02, Nelson Herron wrote: I have an Olicom switch configured with two rings

GBIC to 100mb FX [7:45792]

2002-06-04 Thread Will K.
Does anyone know of a converter or transceiver that would allow me to connect a SH GBIC to a 100mb FX port? Will Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=45792t=45792 -- FAQ, list archives, and subscription info:

RE: trying to test ISDN [7:45786]

2002-06-04 Thread Lee James
Yes, we are running EIGRP, and someone put in an permit any any statement in. I removed that but ISDN is still not dialing. if i look at the history, it shows it has dialed successfully a few weeks ago. The IOS is 11.2(5)P so i cannot force a call to test connectivity with the carrier switch.

Re: show version? [7:45730]

2002-06-04 Thread Chris Camplejohn
It is platform dependent...newer boxes now habe the Electronic Serial Numbers that are retrievable. You best bet is to use the snmp-server chassid-id command. That is what it was intended for and what CW2K queries for the serial number if it is in the config. Of course, you need to do the

Identifying Hosts [7:45795]

2002-06-04 Thread Kevin Wigle
Dear Group, A large organization wants to begin a user pay cost recovery accounting method in an attempt to get proper funding for services the central IT service support provider has delivered free for a long time. They would like to charge a per port fee which includes everything they provide

RE: trying to test ISDN [7:45786]

2002-06-04 Thread Kris Keen
what about a passive interface for eigrp for your bri0, maybe use a floating static if its an option to dial your remote end Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=45796t=45786 -- FAQ, list archives, and subscription info:

Re: static route for port 21-theory rules. [7:45682]

2002-06-04 Thread Kris Keen
You could match traffic on a particular port, set its next hop to a ip addr or a interface, that way you can avoid the issue.. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=45798t=45682 -- FAQ, list archives, and subscription

RE: static route for port 21 [7:45682]

2002-06-04 Thread Kris Keen
how about a route map to send traffic out a particular interface? Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=45797t=45682 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report

Re: Policy routing - directly connected interfaces [7:45628]

2002-06-04 Thread Kris Keen
You asking if its directly connected would it be switched and not effected by policy routing? i think not. To my understanding any packet destined for a remote desination that is directly connected or via a next hop would be routed and subject to your policy. This is strange. Ip local policy

OSPF synchronize [7:45801]

2002-06-04 Thread thinkworker
In the master/slave synchronize procedure, the master will send its DDP (database description packet) while slave only accept and reply with LDR(linkstate database request). OK, if there is some LSA in slave's databse while not in master's database, how do they come to full state while in fact

RE: trying to test ISDN [7:45786]

2002-06-04 Thread Lee James
WE have serveral branches that have passive int on the bri0 and we do use floating static routes. What i ended up doing was removing the config from the bri, reloading the router, entered the switch type and spids and it dialed fine. Thanks all for the suggestions. James Message Posted at:

Re: teaching CCNA [7:45489]

2002-06-04 Thread Kris Keen
Multicasts in TR, hell yes. Switch in 607? unsure, i got 1 question in the old 507 exam. cop r st, definately not. I did Cisco's online sim tool and it marked me wrong (wanted to see how they tested it!) so I'd say definately recommend the full command. Message Posted at:

RE: CCNP Welcome Aboard kit? [7:45454]

2002-06-04 Thread Kris Keen
Which is very very cheap. Looks like a card you get from a cornflakes packets, shows you how much Cisco value us. Far out, I was really disappointed to find my CCNP card exactly like the CCNA. what a joke, my CNE card kicks the CCNP card Message Posted at:

Re: Policy routing - directly connected interfaces [7:45628]

2002-06-04 Thread Chuck
my results seem to disagree with your thought. 172.31.1.1 loop0---router--WAN--172.31.5.0 network | --WAN-- 172.31.3.0 network the route-map I used

Re: Identifying Hosts [7:45795]

2002-06-04 Thread Clayton Dukes
A Url would probably help :-) http://www.cisco.com/cic http://www.micromuse.com If you need to be contacted by an Account Manager, I can help locate one in your region. Clayton Dukes CCNA, CCDA, CCDP, CCNP, NCC - Original Message - From: Clayton Dukes To: Kevin Wigle ; Sent:

Re: Identifying Hosts [7:45795]

2002-06-04 Thread Kevin Wigle
yeah - I was just surfing CCO in that area but the light descriptions aren't saying much... Kevin - Original Message - From: Clayton Dukes To: Kevin Wigle ; Sent: Tuesday, 04 June, 2002 23:51 Subject: Re: Identifying Hosts [7:45795] Hi Kevin, Take a look at Cisco Info

Re: Identifying Hosts [7:45795]

2002-06-04 Thread Clayton Dukes
Hi Kevin, Take a look at Cisco Info Center, it can do exactly what you are trying to accomplish using CIC/USMs (Usage Service Monitors) Clayton Dukes CCNA, CCDA, CCDP, CCNP, NCC - Original Message - From: Kevin Wigle To: Sent: Tuesday, June 04, 2002 10:55 PM Subject: Identifying

Re: Identifying Hosts [7:45795]

2002-06-04 Thread Kevin Wigle
Unknown referrer you should notify the [EMAIL PROTECTED] or similar responsible person for the content or search feature of that site, of the incorrect link to http://www.cisco.com/cic ?? Kevin - Original Message - From: Clayton Dukes To: Clayton Dukes ; Kevin Wigle ; Sent:

RE: 640-605 BCRAN Beta PASSED!! [7:45777]

2002-06-04 Thread adam lee
Hi Bill, I am curious how the new test differs from the old exam. I take the remote exam almost a year ago. Thanks. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Creighton Bill-BCREIGH1 Sent: Tuesday, June 04, 2002 4:03 PM To: [EMAIL PROTECTED]

Re: SRB and NetBEUI/SMB traffic [7:45778]

2002-06-04 Thread Nelson Herron
I have the basic topology you conjecture, and I have configured the basic SRB as you describe. On my system it works in the same way as the ring group model that I described - I get some bridging but no browsing. The clients are Win2k machines running MS NetBEUI - no IP. As fas as I know