RE: IPX EIGRP and Frame Relay switch [7:46626]

2002-06-15 Thread Karen Menpes
The exact configs for the 3 routers are pasted in below. They are a little 'untidy'. FR Switch --- version 12.0 service timestamps debug uptime service timestamps log uptime service password-encryption ! hostname A ! enable password 7 0458 ! ip subnet-zero clns net 01.0010.7b3c.0b38.00 c

Re: IDS Questions [7:46639]

2002-06-15 Thread Hamid
Maybe a silly question, Can anyone tell me what shunning is? ""John Kaberna"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > I don't see why you'd get flamed for that except maybe from a die-hard Cisco > employee and even then I doubt it. I prefer Snort a lot more than Cisco's

RE: IPX EIGRP and Frame Relay switch [7:46626]

2002-06-15 Thread Karen Menpes
Hi this issue has now been solved ! Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=46678&t=46626 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violation

urgent !!! [7:46679]

2002-06-15 Thread Mohannad Khuffash
Dear All, I have a problem at my core switches (2948G), there are a lot of packets missed at all the ports at separate times. When i make a continuous pings at many servers, it give me a time out at all ping windows (about 3 to 15 packets) then it come back pinging. Please any help ? -- Mohan

RE: urgent !!! [7:46679]

2002-06-15 Thread [EMAIL PROTECTED]
did you try any deb commands like deb ip icmp to see what the loss packet happened -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Mohannad Khuffash Sent: Saturday, June 15, 2002 11:33 AM To: [EMAIL PROTECTED] Subject: urgent !!! [7:46679] Dear All, I h

Re: Cryptography and frame-relay [7:46621]

2002-06-15 Thread Michael Graham
Believe it or not, there is equipment that can pick up tempest signals, up to 200 metres away. So it would all depend on the type of information. If you strongly believe the information is paramount to national security or something then I would suggest building a faraday cage around you establi

Re: IDS Questions [7:46639]

2002-06-15 Thread Ben Woltz
Shunning refers to the functionality of the IDS sensor to dynamically create and ACL that denies the attacker access and apply it to a specific interface. For example, you would have it setup that when the sensor sees an attack from 65.65.65.65 it would create and ACL denying 65.65.65.65 access a

Re: IDS Questions [7:46639]

2002-06-15 Thread Steven A. Ridder
I wouldn't use shunning only because a hacker can spoof an address, and you shun it, such as a web server, or IDS console, etc.. ""Hamid"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Maybe a silly question, Can anyone tell me what shunning is? > > > ""John Kaberna"" wrote i

how to change MTU? [7:46685]

2002-06-15 Thread Steven A. Ridder
This may be a basic command, but how does on change the MTU on a serial interface and get the new value to stick? I change it on the interface, the router accepts the command with no error messages, but when I check the interface under sh int s0, the value remains unchanged. Any ideas? -- RFC

Re: IPX EIGRP and Frame Relay switch [7:46626]

2002-06-15 Thread Chuck
don't keep us in suspense. which error solved the problem? the missing clock rate on one of the serial interfaces? the network protocols on the frame relay interfaces? the no frame inverse NOVEL? all of the above? fair's fair. netiquette requires you fill us in. your realization will help others

RE: IDS Questions [7:46639]

2002-06-15 Thread [EMAIL PROTECTED]
Cisco IDS allows you to choose which signatures you shun on. Usually IP spoofing is involved with the packet signatures, where it doesn't matter that the response doesn't reach the attacker. Shunning is used on the more interactive attacks. Also, Cisco IDS allows you to exclude certain addresse

Re: Cisco Lab Changes..Updated [7:46623]

2002-06-15 Thread Michael L. Williams
"Frank Merrill" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Michael L. Williams wrote: > > > > Yeah... I don't get this... I know there aren't any 2950s > > and 3550s that > > support power, but there's the 3524-PWR-XL-EN switch that does > > provide > > inline power.

RE: IDS Questions [7:46639]

2002-06-15 Thread Roberts, Larry
That's why you always put your own IP as well as the CSPM server on the do not shun list... That's a good point, but that scenario is exactly why they added the do not shun list. Well that and the person who puts a custom signature denying telneting and locks themselves out :) Thanks Larry

All this talk about IDS.... [7:46690]

2002-06-15 Thread Maximus
I've decided to take the plunge. 1.Has anyone ever successfully installed Snort on a 2000 box? 2.I downloaded Snort 1.8.6 and WinPcap. Dunno why I pulled down Winpcap, but I did. 3.Either way I'm just a newbie to Snort(IDS) and can't find a down and dirty guide to get started... A

Re: Cisco Lab Changes..Updated [7:46623]

2002-06-15 Thread Steven A. Ridder
They're going to retire the 3524 PWR because it dosen't have the new "AVVID" capabilites of the new 2950/3550's. They're just waiting for the IEEE to ratify the new 802.3af standard, so they can include it into the 3550 switches. I guess the new standards will use different pins and wires to del

RE: Cisco Lab Changes..Updated [7:46623]

2002-06-15 Thread Giuseppe Citerna
Hi , i have the lab at october, and i dont know what is switch , 5000 or 3550?! It's true that CCIE must knowns every things, but the game must be equal for all, and therefore the ccie candidate must known what is the equipment list. what about?! thanks Message Posted at: http://www.groupstud

Re: IPX EIGRP and Frame Relay switch [7:46626]

2002-06-15 Thread Karen Menpes
Realised that I needed to define the 'same' IPX network (7) on DTE Router E(DLCI 101) and DTE Router B (DLCI 102) They had different IPX network numbers. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=46692&t=46626 -- FAQ, list ar

Re: IDS Questions [7:46639]

2002-06-15 Thread itsme
One thing the Cisco IDS has, and why we went with it is because of the host sensors, and the ability to cooralate all the hosts data with the network data. Although we haven't purchased the hosts as of yet, we know it's viable. -TV ""Brian Zeitz"" wrote in message [EMAIL PROTECTED]">news:[EMAIL

RE: Cisco Lab Changes..Updated [7:46623]

2002-06-15 Thread Brian Backer
Why does it matter since they said clearly that any 3550 specific options won't be used until mid-November?!?!? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Saturday, June 15, 2002 1:39 PM To: [EMAIL PROTECTED] Subject: RE: Cisco Lab Changes..Updated [7:466

RE: Cisco Lab Changes..Updated [7:46623]

2002-06-15 Thread Frank Merrill
Giuseppe Citerna wrote: > > Hi , > i have the lab at october, and i dont know what is switch , > 5000 or 3550?! > It's true that CCIE must knowns every things, but the game must > be equal for all, and therefore the ccie candidate must known > what is the equipment list. > what about?! > thanks

Power over ethernet [7:46623]

2002-06-15 Thread jeff sicuranza
Fellas, something interesting for rigging your own power over ethernet see link below: http://www.cablemodeminfo.com/quicktip-cabling-power-ethernet.html-ssi Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=46697&t=46623 -- FAQ, li

Re: Cisco Lab Changes..Updated [7:46623]

2002-06-15 Thread Frank Merrill
> > > > Yes, they do want to do it, and will retire the 3524-PWR as > soon as they > can. > > Uh if they DO want to do it (have switches with inline > power), then why > would they want to retire the 3524-PWR?!?!?! ( I know there's > the > 4000/6000s but I doubt you'll see someone putting a

RE: All this talk about IDS.... [7:46690]

2002-06-15 Thread Maccubbin, Duncan
As for #3 all the info you need is at www.snort.org. -Original Message- From: Maximus To: [EMAIL PROTECTED] Sent: 6/15/02 12:16 PM Subject: All this talk about IDS [7:46690] I've decided to take the plunge. 1.Has anyone ever successfully installed Snort on a 2000 box? 2.I d

Re: All this talk about IDS.... [7:46690]

2002-06-15 Thread Bob Timmons
Check out the SANS site Specifically: http://www.sans.org/newlook/resources/IDFAQ/snort.htm Let us know how you fare... I, for one, would be interested. > As for #3 all the info you need is at www.snort.org. > > -Original Message- > From: Maximus > To: [EMAIL PROTECTED] > Sent: 6/15/0

RE: how to change MTU? [7:46685]

2002-06-15 Thread Dave Law
Steven, What syntax are you using to change it? There are two commands for changing the mtu size. One is "mtu x" and the other is "ip mtu x" which will not change the size automatically under physical mtu. -Dave Below is some additional info. regarding this. http://www.cisco.com/univercd/cc

Foundation 640-509 [7:46702]

2002-06-15 Thread roedi reza
Has anyone taken Foundation 640-509 recently ? Are the questions taken from 640-5xx question pool or taken from 640-6xx question pool ? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=46702&t=46702 -- FAQ, list archives, and sub

STP Question: Root Bridge placement load balancing [7:46701]

2002-06-15 Thread [EMAIL PROTECTED]
Hi, Studying Cisco LAN Switching,(by Hamilton & Clark), I didn't get how exactly this method (Root Bridge placement load balancing)works. He provides such an example (Figure 7-10): ___ |Cat-C (IDF)| |___| 1/1 /\ 1/2

RE: STP Question: Root Bridge placement load balancing [7:46703]

2002-06-15 Thread Roberts, Larry
Well, I don't have that book but let me go off went you sent. ___ Assumptions made: All 3 switches carry both VLAN's and all 3 switchs have members in both VLAN's. The links between Switches are setup for VLAN trunking ___ Cat-C will have traffic that needs to access servers in both VLAN

Cisoc 3550 SMI [7:46704]

2002-06-15 Thread Kris Keen
Hi All We have a few of these at work in addition to a few Cisco 3550 EMI's. Can we upgrade the SMI to EMI just via the CCO? Do we need to pay for it? I have the option of downloading the Software but im hesitant to at the moment. Is the hardware between the two units identical? Cheers Messag

Test [7:46705]

2002-06-15 Thread Ismail Al-Shelh
test Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=46705&t=46705 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]