RE: help with pix conf (simple) [7:49800]

2002-07-27 Thread Peter zhang
1. the example i showed you was based on your previous configuration, and yes you need to have static command to have outside hosts to connect to inside host. static (inside,outside) 10.1.2.3 10.1.1.3 make sure conduit or have access-list permit the traffic to 10.1.2.3 Message Posted at:

RE: CCNP support 640-606 [7:49837]

2002-07-27 Thread David j
I think it was the hardest of ccnp, very strange and tricky questions. As cisco says in its website, there aren't any questions on simulation. I passed with a 843 and a 0% in AppleTalk (I'm sorry, but I have never seen an Apple) sunil sunilindia wrote: Hi, Is this the new version toug, I

Re: Eigrp Summarizing [7:49730]

2002-07-27 Thread David j
Yes of course, you need to summarize on hub and use stub on spoke routers. Anyway, I think that if you don't really need this feature you mustn't use it and I wouldn't use it if my topology wasn't truly hub-and-spokeI had to use it because some of my spoke routers (2500 2600) had very big

Re: Cisco 2651 Problem [7:49815]

2002-07-27 Thread David j
As 2600 series are modular, on mode rommon or boot, I think they have no way of knowing what kind of interfaces have connected, so they use the first lan interface for downloading the new ios, check that link http://www.cisco.com/warp/public/130/recovery_c2600.html It's also posible to download

RE: Cat 5000 ram [7:49643]

2002-07-27 Thread Symon Thurlow
Hmm, I think that I might have already tried that (I have a bit of 2500 ram floating around) but my SUP is the early one that needs the special ram. Thanks, I'll try it again and see what happens! Cheers, Symon -Original Message- From: Neal Rauhauser [mailto:[EMAIL PROTECTED]] Sent:

Book Advice [7:49865]

2002-07-27 Thread Hunt Lee
Hi All, Has anyone read the OSPF Command Reference book by Parkhurst?? Is it any good?? I'd appreciate any comments. Best Regards, Hunt Lee Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=49865t=49865 -- FAQ, list archives,

RE: Cat 5000 ram [7:49643]

2002-07-27 Thread Symon Thurlow
Thanks Neal, it worked a treat, I now have 20MB Dram. I had a couple of 16's floating around, one didn't work, but one did. Cheers, Symon -Original Message- From: Symon Thurlow Sent: 27 July 2002 10:38 To: [EMAIL PROTECTED] Subject: RE: Cat 5000 ram [7:49643] Hmm, I think that I

RE: Huawei routers - a.k.a. futurewei.com [7:49778]

2002-07-27 Thread Paul Borghese
Whoa There! Accusations are flying. First of all, it is not illegal to copy the look and feel of an interface. Unless the artistic aspect of the work may be completely separated from its functional aspect, no protection is available from copyright law! The concepts, processes, ideas,

RE: pix quick help [7:49450]

2002-07-27 Thread John Green
the other reason that i have read is that pdm location tells the pix about the reference of the location with respect to the interface. any one know the reason or can summarise about this pdm location command ? --- Mark W. Odette II wrote: I believe the answer is yes. The HTTP command

RE: help with pix conf (simple) [7:49800]

2002-07-27 Thread John Green
that's exactly what i am trying to find. do we need a static command as well in addition to the access-list to allow traffic from lower security to a higher security ? static command is for mapping ip addresses ? right ? and access list is the one that allows the access ? right ?? --- Peter

Re: Requirement for setting up the survial remote for IP [7:49870]

2002-07-27 Thread alain faure
Hi, Look at : http://www.cisco.com/univercd/cc/td/doc/product/access/acs_mod/cis2600/hw_in st/wic_inst/icupdate/srst175x.htm It is for 175x but think could help you (normaly SRST can work without CallManager, that what it is done for: backup in case CCM is not reachable) But there is maybe a

Re: BGP and HSRP [7:49807]

2002-07-27 Thread Jay Greenberg
I'm not sure what you mean. Generally, HSRP is just used for *your* router redundancy, not the upstream ISP. One feature, however, is that you can change priorities based on the status of an interface, which you know, but that doesn't apply here because your interface will likely never go down

Re: ISP QoS Architecture Question [7:49767]

2002-07-27 Thread alain faure
Hi, I Have made a document about QoS IP (but unfortunatly in french) If many people are interreted i will translate in English. So You have to consider the kind of application you have on the ISP : is there Netmeeting, voice/video traffic. Is there FTP ... Or others kind of applications. Do

Re: BGP and HSRP [7:49807]

2002-07-27 Thread Scott
Check out BGP conditional advertisement. HTH, Scott sam sneed wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... I have a pair of 2621's and 2 reduandant ethernet handoffs to my ISP. 1 is a primary and the other is a backup which should only be used if the primary fails. On my

Re: access-list for steaming audio [7:49817]

2002-07-27 Thread Steven A. Ridder
I haven't been keeping up with NBAR, but they may have some pdm's to block the streaming audio apps. NBAR was built for stuff like that, but I don't feel there's a need to block this type of stuff. Same with IM. Let the users have some use of their PC and increase productivity. Spencer

Re: CCIE Study: CBWFQ / CQ [7:49816]

2002-07-27 Thread Steven A. Ridder
CBWFQ is easier to configure and the default q is a WFQ. Jay Greenberg wrote in message news:[EMAIL PROTECTED]... Can anyone please explain the difference between CBWFQ and CQ? It seems to me that they both allow you to class traffic in a custom manner, so whats the main difference? Jay

Re: CLI vs PDM [7:49774]

2002-07-27 Thread Steven A. Ridder
PDM. It's just too easy. Or use CiscoWorks VMS or CSPM to manage a bunch of them. I can't stand the cli and it's archaic language. I'd rather make sure my FW is easy to configure so I don't miss anything. If something is too complicated, you don't even know if you have problems because you

strange result. [7:49877]

2002-07-27 Thread mlh
show interface display for token ring will show .. (all zeros) as the BIA interface MAC or hardware address. What does this usually mean? Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=49877t=49877 -- FAQ, list

Re: ISP QoS Architecture Question [7:49767]

2002-07-27 Thread Steven A. Ridder
There are a lot of Cisco Powered networks doing QoS, but more for multi-service type stuff for voice and video. If you look on Cisco's web-site, there's a whole program your ISP can join to become Cisco-powered in multiservice, although I don't know the exact search terms you'd need to find it.

CCNP Please Clarify. [7:49826]

2002-07-27 Thread Shravan Bellal
Hi All, Today only I subscribed to this mail ID. Its so nice to talk with all Cisco Experts. I started preparing CCNP (2.0) routing exam. I have Cisco CCNP exam certification Kit. Is this material is sufficient for CCNP Routing exam or any other good material for this exam. Also please let me

Re: access-list for steaming audio [7:49817]

2002-07-27 Thread Shawn Heisey
Steaming audio would be caught by your porn filter! On the other hand, StReaming audio and video tends to be very difficult to block, as most of the programs that do that sort of thing will function just fine on port 80. I don't think you want to block port 80. You didn't mention what

Re: PIX 501 and enabling DES [7:49705]

2002-07-27 Thread Gaz
The image comes with the Pix if you bought it legally from Cisco. I'm sure they could sell all Pix's with encryption enabled and charge more for all of them. I'd rather have the option to pay for Pix without encryption if I don't need it. As I said though in version 6.2 onwards you don't need to

FW: New CCIE Written is here. Be afraid, be very [7:49615]

2002-07-27 Thread Kaminski, Shawn G
Repost #1. Looks like the first one may have gone to the bit bucket. Of course, I wouldn't be surprised if the second I hit the send on this email, the first one will show up! Shawn K. -Original Message- From: Kaminski, Shawn G Sent: Friday, July 26, 2002 6:15 PM To: 'Jason

OT: Is there much call for remote lab time? [7:49879]

2002-07-27 Thread Symon Thurlow
I have a reasonable lab, and am considering making it available (via the web), for a nominal fee. 2501 x 2 2503 x 2 2504 x 1 (all 16/16 12.2 or 12.1) 3620 with Token ring, Ethernet, fast Ethernet, serial x 2 (can be MLS RP) 2620 with Fast Ethernet, ISDN and 1 x Serial, (will add quad serial

RE: Can get it to work (Pix 515 behind cable modem [7:49845]

2002-07-27 Thread Rik Guyler
This reply is a lng one! Please allow me to clear up a couple of misconceptions I have read on this thread. First, a while it is true a PIX blocks everything by default, this only applies to inbound traffic initiated from the outside. Outbound sessions initiated from the inside are all

Re: Frame-Relay NNI -- [7:49849]

2002-07-27 Thread Marc Russell
You have the lmi-type set wrong on the switch-to-switch connection. It should be frame lmi-type q933a See the link below for more info on frame relay. http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fwan _c/wcffrely.htm#11076 Marc Russell Network Learning, Inc. 1677

RE: New CCIE Written is here. Be afraid, be very [7:49615]

2002-07-27 Thread Kaminski, Shawn G
Well, Cisco wrote me back and they said that any CCIE Written 350-001 exams taken on August 7th or after will be the new exam, regardless of when you registered. So, if any of you who registered for the exam before August 7th to take the exam after August 7th thinking that you were going to take

RE: access-list for steaming audio [7:49817]

2002-07-27 Thread Maccubbin, Duncan
Be careful with this kind of thinking. More and more holes in IM are showing up everyday. If you let IRC on your network then you are asking for trouble. As for streaming audio, have you looked at the % of bandwidth they use? If you have a fairly utilized pipe or (like most companies) are paying

Re: access-list for steaming audio [7:49817]

2002-07-27 Thread Steven A. Ridder
As log as you can nat the IM (or tunes) behind the FW, it's pretty safe, but I'll never say there aren't any vulnerabilities. At leas tif it's antted, there are no holes comming in. -- RFC 1149 Compliant. Maccubbin, Duncan wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Be

polycom Video Unit [7:49882]

2002-07-27 Thread Steven A. Ridder
Does anyone know what type of traffic a typical Polycom Video Con. unit creates? It it multicast? What ports does it use? Is it standard h.323? I can sniff it, but if anyone has already done their homework on it, it will save me some time. -- RFC 1149 Compliant. Message Posted at:

Re: BGP and HSRP [7:49807]

2002-07-27 Thread Jason Greenberg
How does bgp conditional apply here? On Sat, 2002-07-27 at 10:52, Scott wrote: Check out BGP conditional advertisement. HTH, Scott sam sneed wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... I have a pair of 2621's and 2 reduandant ethernet handoffs to my ISP. 1 is a

Re: polycom Video Unit [7:49882]

2002-07-27 Thread John Neiberger
- Original Message - From: Steven A. Ridder To: Sent: Saturday, July 27, 2002 10:05 AM Subject: polycom Video Unit [7:49882] Does anyone know what type of traffic a typical Polycom Video Con. unit creates? It it multicast? What ports does it use? Is it standard h.323? I can

Re: polycom Video Unit [7:49882]

2002-07-27 Thread Michael L. Williams
Depends on the model, but usually you'll see traffic all into either 128Kbps, 384kbps, 768Kbps or 1.5Mbps We have a Polycom unit that has ISDN and a LAN port, but if you telnet to it's IP on the LAN you get a status page showing H.323 is disabled, so we can't use it on the LAN (at least

RE: access-list for steaming audio [7:49817]

2002-07-27 Thread Dan Penn
What I really like is some corporations embracing instant messaging for internal use. I think that having a private corporate IM server for the corporate users to connect to would be a great way to increase productivity. However, on the same hand, I would fear the end-users being able to

RE: CCNP Please Clarify. [7:49826]

2002-07-27 Thread Dan Penn
The exam material for CCNP hasn't really changed. What changed is the format of the tests. Now some of the exams include real world simulations. The material you have is still relevant. I'm not I really understand what you are asking, but there is no way for you be a CCNP 2.0. Your CCNA is

RE: Cabletron vs Cisco Switches [7:49812]

2002-07-27 Thread Jeffrey Reed
If you are swaying toward Cisco for any other reason, you can probably purchase the 2950-24's (without uplinks) as cheap as the VH2402SM and start working on your Cisco switching skill sets. I don't like the VH's very much either, but they are cheap. To make them run reasonably well, make sure

Re: Frame-Relay NNI -- [7:49849]

2002-07-27 Thread Pierre-Alex Guanel
I was not aware of this requirement. Thank you!!! Pierre-Alex Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=49890t=49849 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct

Re: access-list for steaming audio [7:49817]

2002-07-27 Thread Steven A. Ridder
I talk to people outside the company all the time with IM. I use it for remote tech support. It's great. Dan Penn wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... What I really like is some corporations embracing instant messaging for internal use. I think that having a

Changing the Telnet port from 23 to XXXX [7:49892]

2002-07-27 Thread Jonathan Mian
Ok this may be a really dumb question, but what the heck. Is it possible to chabge the telnet port from 23 to lets say 5023 (assuming its not used by anything else.) I would like to do this for my Cisco 2511-RJ to provide better security for the lab. Any pointers are most welcome, even the

Re: BGP and HSRP [7:49807]

2002-07-27 Thread Stephane LITKOWSKI
A couple of suggestions: 1) If you run iBGP, be *sure* not to advertize the default route learned from one edge router, through iBGP to the other edge router, and back out the other upstream. You can use a filter list to prevent that. I agree with you about your technique but : Why do you

Re: IBGP Usage for enterprise company network [7:49736]

2002-07-27 Thread Stephane LITKOWSKI
If you have just one BGP edge router, u don't need to use iBGP. But if you have many ISP, with many edge routers. iBGP is very useful to pass BGP attributes from one edge to another and so making global decisions for exiting the AS based on BGP attributes (for example, using local-pref

Re: 11050 dropping packets [7:49169]

2002-07-27 Thread Stephane LITKOWSKI
I never see this problem on CSSs. I done some tests on HTTP1.0 and 1.1 one year ago using ap0405068b and it worked fine. What do you mean by 1.1 doesn't seem to send the full header info ? what info are missing ? I just took some traces of HTTP 1.1 traffic and header are like HTTP 1.0 (the big

Re: polycom Video Unit [7:49882]

2002-07-27 Thread Ronnie Higginbotham
Watch for word wrap Ronnie Michael L. Williams wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Depends on the model, but usually you'll see traffic all into either 128Kbps, 384kbps, 768Kbps or 1.5Mbps We have a Polycom unit that has ISDN and a LAN port, but if you

Re: polycom Video Unit [7:49882]

2002-07-27 Thread Ronnie Higginbotham
Ronnie Higginbotham wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Watch for word wrap Ronnie Michael L. Williams wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Depends on the model, but usually you'll see traffic all into either 128Kbps, 384kbps,

Re: polycom Video Unit [7:49882]

2002-07-27 Thread Ronnie Higginbotham
It is not sending the URL. Go to Cisco.com and do a search on Polycom Video First link http://www.cisco.com/warp/public/788/voip/polycom_video_over_ip.html Ronnie Higginbotham wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Ronnie Higginbotham wrote in message [EMAIL

Re: polycom Video Unit [7:49882]

2002-07-27 Thread Michael L. Williams
John Neiberger wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... I suppose it depends on the unit but ours mainly use unicast to the Cisco MCU. As far as I know they use standard H.323. The downside if you're using an MCU is that the PolyComm units have a lot of different codecs

Re: BGP and HSRP [7:49807]

2002-07-27 Thread Jason Greenberg
No, the filter lists would only be to prevent the default route from being advertised back out the other upstream link. Note that usually the BGP AS-path loop avoidance rules will prevent a problem in this scenario (especially with only the default route being advertised), but in a more advanced

Re: CCIE Study: CBWFQ / CQ [7:49816]

2002-07-27 Thread Jason Greenberg
Ok fair enough, but from a CCIE lab exam question perspective, I'm trying to determine when to use which technique for what type of question. Are there certain things that each can do that the other cannot? On Sat, 2002-07-27 at 10:59, Steven A. Ridder wrote: CBWFQ is easier to configure and

OT: Cisco routers 2513, 4500 and ISDN simulator for sale [7:49903]

2002-07-27 Thread phillip s
Hi Everyone, Sorry for posting non-related Cisco question on this group; however, I have the following items available for sale since I've done with my Cisco preparation: 1) one Cisco 4500 router. Here is the show version output: Router#sh ver Cisco Internetwork Operating System Software

RE: Cabletron vs Cisco Switches [7:49812]

2002-07-27 Thread Wright, Jeremy
One of my resellers told me he could get me a 2950-24 for a little over $900. i know the vh's with maintenance run us about $1100. thanks again for the input -Original Message- From: Jeffrey Reed To: [EMAIL PROTECTED] Sent: 7/27/02 12:18 PM Subject: RE: Cabletron vs Cisco Switches

Re: Cabletron vs Cisco Switches [7:49812]

2002-07-27 Thread Irwan Hadi
On Sat, Jul 27, 2002 at 05:18:13PM +, Jeffrey Reed wrote: If you are swaying toward Cisco for any other reason, you can probably purchase the 2950-24's (without uplinks) as cheap as the VH2402SM and start working on your Cisco switching skill sets. I don't like the VH's very much

Re: Huawei routers - a.k.a. futurewei.com [7:49778]

2002-07-27 Thread Tom Lisa
Careful Paul, We have a lawyer on groupstudy who plays a Cisco CCNP. Paul Borghese wrote: Whoa There! Accusations are flying. First of all, it is not illegal to copy the look and feel of an interface. Unless the artistic aspect of the work may be completely separated from its

Re: CCIE Study: CBWFQ / CQ [7:49816]

2002-07-27 Thread Steven A. Ridder
I haven't taken the CCIE lab yet, but first I'd think they'd want you to use CBWFQ or LLQ, as the rest are just ancient. Cisco is emphasizing AVVID, so you'd probably be tested on avvid technologies. I'd also study NBAR and multicast, among others. Probably dial-peers as well. But I guess

Re: Huawei routers - a.k.a. futurewei.com [7:49778]

2002-07-27 Thread Howard C. Berkowitz
In the past, Cisco has either licensed the IOS to port onto other vendors' hardware (e.g., DEC), or has provided OEM router boards (Cabletron, Synoptics). Any possibility Huawei is doing this will the full cooperation of Cisco, without it being publicized? Message Posted at:

RE: CCNP support 640-606 [7:49837]

2002-07-27 Thread sunil sunilindia
Hi David Thank you, for your suggestion, Can u plz tell me in which section you got more question's for support exam. As you said That exam is tough I am thinking to postpone it one more week to revise all the things again... Thank's again [EMAIL PROTECTED] Message Posted at:

Re: Huawei routers - a.k.a. futurewei.com [7:49778]

2002-07-27 Thread Chuck
anyone know where Cisco manufactures it's products now? BTW, apparently the Huawei products are available in the US. Someone we all know and love tells me he is trying to get his hands on some. I've been looking forward to one of NRF's economics lessons to come out of this thread. This one, I

Re: CCNP Please Clarify. [7:49826]

2002-07-27 Thread Neal Rauhauser
Shravan, I got my CCNP and CCDP 12/2000. I suggest you get the following: Hutnik Satterlee's Cisco CCIE Lab Study Guide - there are 119 hands on labs in this book and you will easily pass the routing and troubleshooting if you do all of them. Andrew Bruce Caslow Cisco Certification

CCIE Security Written/Lab Material [7:49905]

2002-07-27 Thread Tony Jones
All, I was wondering if anyone has used the ccbootcamp (Network Learning) CCIE Security Written book or the lab scenarios? The only other study material I have found is the Boson study exams?? Any feedback on the above study material would be great or if anyone knows of other written and lab

RE: PIX 501 and enabling DES [7:49705]

2002-07-27 Thread Mark W. Odette II
NetEng- If you just bought the 501, you should be under warranty, and can call TAC for Special Access download code, and then go to the Software Center and enter the code they gave you to gain access to downloading a copy of the current software on your PIX... you might even get them to allow

RE: CCNP support 640-606 [7:49837]

2002-07-27 Thread Dan Penn
Hello? Did you pay attention to whole NDA thing? Dan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Saturday, July 27, 2002 9:06 PM To: [EMAIL PROTECTED] Subject: RE: CCNP support 640-606 [7:49837] Hi David Thank you, for your suggestion, Can u plz tell

pix without NAT [7:49914]

2002-07-27 Thread John Green
i am using pix without nat (hence using the nat 0 command) in addition to the access-list command to allow outside hosts to get into internal network is there any else needed. do i need a static command as well ? __ Do You Yahoo!? Yahoo! Health

RE: Huawei routers - a.k.a. futurewei.com [7:49778]

2002-07-27 Thread Larry Letterman
The end products are assembled in San Jose and Austin... the individual modules (4xxx/6xxx) are contracted to companies like selectron and shipped to the mfg sites for assembly in the final config that customers order. Larry Letterman Cisco Systems [EMAIL PROTECTED] -Original