Check your dialer list statement and make sure that it is restrictive enough
to keep routing protocols from bringing up the ddr. You may want to let us
look at the config.
Raul
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Eng. ABDALLAH QUQAS
Sent: Sun
Hello,
Not a complete list, but the important factors are :
Capacity planning,
1. What kind of throughput that is expected overall ? Can the firewall
bus tackle this ?
2. What kind of encrypted throughput expected ? Can the CPU processes
this fast enough ?
3. How many tunnel expected ?
Yes it supports it. I have seen it over 1 b channel. It also works over adsl.
Regards.
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=52038&t=51641
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisc
I have the following router/Switch/Firewall for sale in UAE.
Cisco 2509
Cisco 2502
Cisco 1601
Cisco 1720
PIX Firewall 501
Catalyst Switch
Wic-1T
Wic-2T
All the above equipment has been upgraded with enough DRAM/Flash for all the
IOS flavours. Even all the cables required for back to back conne
All,
My apologies for having to post this here, but I have not been able to get
an answer from anyone.
The scenario is this, I have 2 linksys routers connected to each other over
a VPN tunnel (dsl). My question is, if I was to access the internet would
it need to travel on the tunnel to the oth
I just got 10 sets from TAC...very true...not easy to get, but it can be
done.
""Robert D. Cluett"" wrote in message
news:[EMAIL PROTECTED]...
> Guess what, Boot Proms are no longer available for the 2500 series router.
> They are no longer listed on the Cisco Pricing Tool. I've spoken with
bot
The reason the DDR is staying up 24 hours is the eigrp hello packeats are
causing the diealer to dial. The address that eigrp multicasts its hello
packets is 224.0.0.10. Your dialer list does not preclude eigrp hello
multicast address.
Your dialer list should go something like this :
First use e
Address in access-list should be 224.0.0.10my bad sorry
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Raul F. Fernandez
Sent: Sunday, August 25, 2002 12:23 PM
To: [EMAIL PROTECTED]
Subject: RE: CISCO 3600 ROUTER DDR BRI IS ALWAYS CONNECTED 24 HOURS
Should a pix 501 be able to pick nmap port scans from a unix box? I have
the pix book and have applied everything as said but it will not pick up
a port scan.
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=52044&t=52044
--
FAQ,
Robert,
If you look at the route tables, your VPN tunnel endpoint (the other
end) will have a better metric since this gets installed AFTER your
connection to your ISP. Thus ALL traffic will be sent through this VPN
tunnel. When you disconnect from the tunnel, your ISP's default gateway
metric wil
I'll second this...As stated in an earlier post, I just got bootROMS for a
3104 from Cisco, though it wasn't the revision I was hoping for. These
routers are older than the 2500 series, and they didn't even bat an eye at
being able to provide them. I had them "next-day" as a matter of fact.
Ther
I remember their was a link to get 2 boot romms, does any one know it.
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Saturday, August 24, 2002 7:13 PM
To: [EMAIL PROTECTED]
Subject: RE: NEWS! Cisco Boot Proms No Longer Available. [7:51989]
Thats a lie. They
Here is how I configured every thing. I do not see a ping or anything
logging to the syslog server to the outside interface.
ip audit name Outbound-Info info action alarm drop
ip audit name Outbound-Attack attack action alarm drop
ip audit name Inbound-Info info action drop
ip audit name Inbound-
Can some one let me know useful links to understand GRE tunnelling or can
explain it.
Thanks as always
Jaspreet
_
Consultant
Andrew NZ Inc
Box 50 691, Porirua
Wellington 6230, New Zealand
Phone +64 4 238 0723
Fax +64 4 238 0701
e
Has anyone here experienced problems with the new ios 6.2 on the pix. I
have noticed when I installed it that some users can connect to the
internet until I issue clear xlate command.
These are my current timeouts:
timeout xlate 3:00:00
timeout conn 12:00:00 half-closed 0:10:00 udp 0:02:00
Neal Rauhauser wrote:
>
> BGP is funny with RIB-failure, OSPF is weird with dropping
> subnets
> that are visible elsewhere in a simple network, NAT some times
> explodes
> depending on version, EIGRP is a little screwy, and now I've
> got a truly
> exceptional problem :-(
This would make a grea
Hi, I'm currently studying for the CCIE R/S written exam. Could somebody
please give me an opinion on the CCIE R&S Exam Certification Guide Book by
A. Brune (Cisco Press) It has just been released in the UK and I am
considering getting it to add to my never ending collection of reading
material
To bring this topic to a conclusion, here are the basic ideas for a vlan
tunneling lab exercise
Customer A and Customer B each use the same provider to carry network
traffic between their respective sites.
Necessary Equipment
To properly perform this Lab exercise, the following equipment is req
Hello,
This looks to be a very straight forward configuration, but it is
giving me fits. It's a simple Multilink PPP setup.
I can "ping" from Router A to Router B, but I can't do any
TCP i.e. Telnet, SSH, Traceroute, etc.
All I want to be able to do is telnet from
Router A to Router B...
The
hi everyone,i have two css 11801 and two servers which link as cluster,for
the port in every server is only one gigabit ethernet port and the ports in
css are gigabit ports too! now i want only link one server to one css by one
link,and two css link together ,so can i achieve the redundance and th
hi everyone,i have two css 11801 and two servers which link as cluster,for
the port in every server is only one gigabit ethernet port and the ports in
css are gigabit ports too! now i want only link one server to one css by one
link,and two css link together ,so can i achieve the redundance and th
Try putting 'no ip address' on the serial interfaces.
You don't need a ip unnumbered or ip address on them
if they are part of a multilink-group.
Have you tried removing the NAT? Don't see a complete
config for NAT so can't see if it may be a issue.
Erick
--- Beckwith Rod wrote:
> Hello,
>
>
Dear Sir/Madam,
I have two NASs in my network. The first NAS is Cisco Router(2511) and the
second is a Win2000 Advaned Server.
My Win2000 NAS is a Radius client but my Cisco router use TACAC+ protocol.
I'm using "NTTacPlus" software for Authentication & Accounting & Authorising.
Some of users log
can you speak chinese
你们能看懂吗
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=52060&t=52060
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to
Hi All,
does any one have a copy of a security policy (like a corporate security
outline for the company) that they are willing to share, so I can create one
using that as a template/guide ?
Thanks all
John
Sydney, Australia
Hello All,
Currently we have Cisco 7206VXR Router with c7200-js-mz.122-10.bin
image.(12.2(10)T.).
What upgradation/image is required to support 6PE ("IPv6 provider edge
router over MPLS" feature.
Which IOS is supporting "IPv6 provider edge router over MPLS(6PE) " feature
for Cisco 7206 VXR Rout
I have set it up here with another colleague using frame relay encapsulation
and dialing up into a Nortel passport. In both IOS ver 12.1 and 12.0, the
router crashed with a software error. When you use IOS ver 11.3 it works
perfectly!!
I haven't had a chance yet to get TACs opinion on this one yet
27 matches
Mail list logo
