yeah ill second this opinion.. deal's book is awesome.
cheekin wrote:I have not actually gone through Chapman's book. I think
Deal did a
good job writing the PIX Firewall book. Covers PIX v6.2 too.
cheekin
Mark Smith wrote:
Cisco PIX Firewalls - Richard Deal
ISBN: 0072225238
Osborne/McGraw
Hi Priscilla
Maybe you can try this:
ip forward-protocol udp 137
ip forward-protocol udp 138
ip forward-protocol spanning-tree
Best regards,
William
Priscilla Oppenheimer wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
bergenpeak wrote:
Thanks. I always like hearing from you,
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Priscilla,
For startup (win 9x) you must put wins in place. The Netbios node type is
covered in a prev thread.
You can do a include statement in the client lmhosts file that refers to a
lmhosts file at the DC for (example the netlogon share or on a
Someone, somewhere along this thread mentioned quantum
computing/programmingin my effort to add tangents to an already
fragmented thread (although I am immensely enjoying the nrf/Berkowitz
segment, even if I can't even begin to answer the questions posed), here ya
go!
I know how to set MPLS VPN in a network with 7507 as the Core routers.
But what is necessary to integrate a 6500 switch with FlexWan module and
PA-HSSI/PA-ATM cards in the Core and keep the MPLS VPN service in the
location served by the switch?
The network is like that:
Hi all,
I am reading Cisco Press Inside Cisco IOS Software Architecture and
have some outstanding questions about the scheduler, maybe somebody can
help me. The text describes how the low priority queue is only skipped
15 times before it is serviced even when there are processes queuing at
higher
Currently the 6500/7600 can only function as a PE with an OSM. Assuming
you have one, you would configure the ethernet port your 2500 is connecting
to into a unique vlan, then configure one of the Gig-E ports on the OSM as
your 'upstream' using dot1q encapsulation, and terminate your VRF there.
I have never bridged connections across a Wan before. is that simple to do?
Robert
The Long and Winding Road wrote in
message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
Hello,
I am having trouble with what appears to be a
Hi all,
I was wanting to hear from you as to what you guys see as some up and
coming
technologies and perhaps what are some players in that space. Thanks.
JunoGuy
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=60209t=60209
Hi,
Well, assuming you have an extra /30 block for the T1 link to your isp, you
can make such a design..
Assume your 32 block is 10.10.10.0/27
INternet---T1---2611 (192.168.0.1/30)---T1---(192.168.0.2/30) 2611
(10.10.10.1/28)
(10.10.10.17/29)
| |||
Hello
Please help me!
I've a problem to download the IOS (c3500XL-c3h2s-mz-120.5.2-XU.bin ) from
my Xmodem following your procedure at
http://www.cisco.com/warp/public/473/corrupt_or_missing_image.html.
My catalyst is a 3500 XL. The prompt is switch:. and when i make dir
commande, it's give me
Missed your favourite TV serial last night? Try the new, Yahoo! TV.
visit http://in.tv.yahoo.com
Received: from [202.144.27.171] by web8004.mail.in.yahoo.com via HTTP;
Fri, 03 Jan 2003 04:29:54 GMT
Date: Fri, 3 Jan
Dear Group,
Need your help in setting up the following :-
SETUP :- There are 2 core switches SW1 Sw2 (connected back to back with
both
the SUP GE ports Fiber uplink (Channeld and trunk). On one of the switch
(SW1)
I have 2 firewalls connected in cluster mode. For this clustered firewall I
have
hey..
AT Last i think i can try and properly help someone yippe..
on your switches type this message
no cdp advertise V2
i have had this all over my network ..and you are correct it is a bug in CDP
..
according to cisco ,this isn`t a fix just a work around
H(and i mean HOPE)TH
steve
NRF makes a very good point below about OSS systems. Pulling this
off from the original thread to take the discussion in a differnent
direction.
As we probably all would agree, the largest cost in running a
network is not the engineering cost or the capital costs, but
rather the cost of
also one thing to point out is that even with a config of the like that has
been correcetly recommended you still have problems with wasted bandwidth
and CPU resource because someone is trying to send the request`s to you in
the first place ...
and also if you have any syslog logging setup they
Been reading Doyvle V1 IS-IS chapter. Also been reading the
PDF on cisco's web site regarding IS-IS.
Some questions based on this reading.
1) Why is it that the IS-IS model of having the router be in
only a single area, as opposed to where an OSPF router can be in
multiple areas results in
At 3:16 PM + 1/3/03, JunoGuy wrote:
Hi all,
I was wanting to hear from you as to what you guys see as some up and
coming
technologies and perhaps what are some players in that space. Thanks.
JunoGuy
I have to ask what time frame you have in mind, and whether or not
you want to limit
At 4:31 PM + 1/3/03, bergenpeak wrote:
NRF makes a very good point below about OSS systems. Pulling this
off from the original thread to take the discussion in a differnent
direction.
As we probably all would agree, the largest cost in running a
network is not the engineering cost or the
[EMAIL PROTECTED] wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
I have never bridged connections across a Wan before. is that simple to
do?
yes, bridging across a WAN link is pretty basic.
but I believe you need to back up a second and make a couple of other
decisions first.
At 3:53 PM + 1/3/03, Mr piyush shah wrote:
Dear all
I thing it is now a real high time someone should take
initiative in stoping the subject of CCIE vs BS or MS
degree. Why are we here for ? to discuss and share
problems faced on networking front
All joking aside, I think this is the key
A quick search on www.symantec.com shows that this is a variant of the
W32.Yaha.K@mm worm. Go to
http:[EMAIL PROTECTED]
to get more details, including removal instructions.
Good luck,
John
Richard Campbell 1/2/03 11:10:26 PM
Below is original E-mail, and attachment file is Love.scr
From:
Hopefully you trained her not to open attachemnts in the future unless she
knows the sender and is expecting an attachment from that sender. It's an
obvious point, but nobody had brought it up yet! :-)
Priscilla
Richard Campbell wrote:
Below is original E-mail, and attachment file is Love.scr
Portfast doesn't turn off STP and state changes can still happen. It just
puts the port into forwarding mode right away. The port still listens and
reacts to BPDUs.
Don't be tempted to disable STP. It leaves the network too vulnerable to
loops. Even if you have a perfectly-shaped physical tree
In the last place I worked, rumour has it that one of my colleagues was
interviewed and thus obtained a UK visa on the basis of his CCIE, and
this later turned out to be written only. HR departments / technical
management aren't always as rigorous as you may think :-)
If this is true then I think
lying on a visa app, lovely...
bri
On Fri, 3 Jan 2003, Marc Thach Xuan Ky wrote:
In the last place I worked, rumour has it that one of my colleagues was
interviewed and thus obtained a UK visa on the basis of his CCIE, and
this later turned out to be written only. HR departments /
At 6:09 PM + 1/3/03, Priscilla Oppenheimer wrote:
Hopefully you trained her not to open attachemnts in the future unless she
knows the sender and is expecting an attachment from that sender. It's an
obvious point, but nobody had brought it up yet! :-)
Priscilla
May all such attackers get a
Loser...
--
Johnny Routin
Leo.Shen wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
www.ciscofan.com
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=60228t=60193
--
FAQ, list archives, and subscription info:
This discussion could tie into the New Technologies thread! Technologies
that do a better job of protecting users from viruses could be big. And an
even harder problem is protecing us from spam. None of the solutions to that
problem work very well yet. The do-gooders that black-list e-mail servers
I suggest trying it without NAT. I have no good experience with voip behind
NAT.
ss ss wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
Hello all!!
I am working for a carrier company who uses ip network consisting of Cisco
Routers to transport voice calls.The company deals
Brian wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
lying on a visa app, lovely...
I am shocked and amazed to learn that people lie on their resumes, their job
applications, their credit card applications, and their visa applications.
I am even more shocked and amazed to learn
Hitesh Pathak R wrote:
Dear Group,
Need your help in setting up the following :-
SETUP :- There are 2 core switches SW1 Sw2 (connected back to back with
both
the SUP GE ports Fiber uplink (Channeld and trunk). On one of the switch
(SW1)
I have 2 firewalls connected in cluster mode. For
Hi Howard,
I'm not suggesting that one should write a book on network management.
Instead, it seems that most network routing books don't spend anytime
reviewing some of the key MIB objects relevant to the routing protocol
that should be considered when configuring the relevant NM tools.
It does
This always works for me:
http://www.kazmier.com/computer/cisco-noswing.html
Symon
-Original Message-
From: l0stbyte [mailto:[EMAIL PROTECTED]]
Sent: 02 January 2003 21:05
To: [EMAIL PROTECTED]
Subject: Re: getpass!.exe [7:25270]
cswan wrote:
Hi guys..
Where can I get a copy of
And as a P router, can it? I do not have a OSM.
John Murphy @groupstudy.com em 03/01/2003
11:24:41
Favor responder a John Murphy
Enviado Por: [EMAIL PROTECTED]
Para: [EMAIL PROTECTED]
cc:
Assunto:Re: MPLS VPN [7:60205]
Currently the 6500/7600 can only function as a PE with
Howard C. Berkowitz wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
At 3:53 PM + 1/3/03, Mr piyush shah wrote:
Dear all
I thing it is now a real high time someone should take
initiative in stoping the subject of CCIE vs BS or MS
degree. Why are we here for ? to discuss
Priscilla Oppenheimer wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
This discussion could tie into the New Technologies thread! Technologies
that do a better job of protecting users from viruses could be big. And an
even harder problem is protecing us from spam. None of the
steve wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
hey..
AT Last i think i can try and properly help someone yippe..
on your switches type this message
no cdp advertise V2
i have had this all over my network ..and you are correct it is a bug in
CDP
yep - changing
steve wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
hey..
AT Last i think i can try and properly help someone yippe..
on your switches type this message
no cdp advertise V2
i have had this all over my network ..and you are correct it is a bug in
CDP
yep - changing
Hi
I am busy studying for the CCNP Remote Access exam and am really stuck
on the modem signalling bits. I think that the key to my problem is that I
don't understand the definitions of a DCE DTE properly and how they relate
to the EIA/TIA-232 cabling pinouts. (which for some unknown reason
hope you don't mind me bringing this back public. I saw no other responses
and I was curious so I've done some further research based on your
configuration. The major difference in my setup and yours is frame relay. I
am using two point-to-point serial links. too complicated for me to tear
down my
The Long and Winding Road wrote:
Priscilla Oppenheimer wrote in
Bill Gates and Steve Jobs are very smart people, but when
they champion
software that thinks it's smarter than the user, most users
just get
annoyed. ;-)
I disagree with your implication here.
You didn't
At 9:10 PM + 1/3/03, nrf wrote:
There it is. You hit it right on the head.
I think a lot of people are emotionally invested in the cert process and
have lost the forest for the trees. One especially ugly manifestation of
this is the phenomena that people who are certified automatically
Duncan wrote:
Hi
I am busy studying for the CCNP Remote Access exam and am
really stuck
on the modem signalling bits. I think that the key to my
problem is that I
don't understand the definitions of a DCE DTE properly and
how they relate
to the EIA/TIA-232 cabling pinouts. (which
nrf wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
At 3:53 PM + 1/3/03, Mr piyush shah wrote:
snip some things
this question-answer forum . I thing we should stop
it.There are lot many imp things on which we need to
condcentrate more.
And what important things
Can you help us understand the situation better? Thanks.
See some questions inline.
l0stbyte wrote:
Hitesh Pathak R wrote:
Dear Group,
Need your help in setting up the following :-
SETUP :- There are 2 core switches SW1 Sw2 (connected back
to back with
both
the SUP GE ports
maybe we can get nfr to weigh in here, and this thread can perpetuate itself
at least as long as the Cert versus Degree thread :-
Priscilla Oppenheimer wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
The Long and Winding Road wrote:
Priscilla Oppenheimer wrote in
Bill
Duncan wrote:
Hi
I am busy studying for the CCNP Remote Access exam and am
really stuck
on the modem signalling bits. I think that the key to my
problem is that I
don't understand the definitions of a DCE DTE properly and
how they relate
to the EIA/TIA-232 cabling pinouts. (which
At 8:33 PM + 1/3/03, bergenpeak wrote:
Hi Howard,
I'm not suggesting that one should write a book on network management.
Instead, it seems that most network routing books don't spend anytime
reviewing some of the key MIB objects relevant to the routing protocol
that should be considered when
Hi,
Trying to find out if the PIX-4FE will work in a 520. Cisco's site no
longer has any 520 info because it is EOL.
Anyone help?
Cheers,
Symon
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=60250t=60250
--
FAQ, list
Chuck makes some really good points. I would add that it probably makes more
sense to route, rather than bridge. That way you can avoid broadcasts
flowing between the two networks and more easily put in some access lists
based on IP subnet numbers. I agree with Chuck that you're going to want to
While Mr. Ladrach is almost certainly correct in his statement that the CCIE
is less challenging that physics and calculus, he might be able to speak
more authoritatively once he has passed the Lab Exam.
As for being easier than accounting and economics classes, if you are
reasonably intelligent
Can you say google?
http://www.boson.com/promo/utilities/getpass/getpass_utility.htm
-Original Message-
From: Symon Thurlow [mailto:[EMAIL PROTECTED]]
Sent: Friday, January 03, 2003 3:38 PM
To: [EMAIL PROTECTED]
Subject: RE: getpass!.exe [7:25270]
This always works for me:
Hello everybody.
I am working on Lab 2 of ccbootcamp and am confused with the following.
Can somebody clarify on that please?
Item 2b says Configure R1's ethernet in OSPF area 1. .
Item 2i says Configure the router R1 with EIGRP and redistribute with
OSPF ( Here I thought I can
It could be related to the problem described here:
http://www.firewall-1.org/2002-05/msg00646.html
l0stbyte
Priscilla Oppenheimer wrote:
Can you help us understand the situation better? Thanks.
See some questions inline.
l0stbyte wrote:
Hitesh Pathak R wrote:
Dear Group,
Need your
where you are going wrong is that you are pursuing your CCIE when you should
be pursuing your degree ;-
refer to that other thread that just won't die.
sorry, I can't resist.
comment or two below:
Rajesh Kumar wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
Hello everybody.
I
I think he is asking for MD5 password cracking. He can try brute force..
l0stbyte
Mossburg, Geoff (MAN-Corporate) wrote:
Can you say google?
http://www.boson.com/promo/utilities/getpass/getpass_utility.htm
-Original Message-
From: Symon Thurlow [mailto:[EMAIL PROTECTED]]
Sent:
l0stbyte wrote:
It could be related to the problem described here:
http://www.firewall-1.org/2002-05/msg00646.html
That page describes two routers that are on the same segment as each other
and also on the same segment as the firewalls. For some unexlained reason
the routers are forwarding
Anyone using these concentrators? I am specifically looking at either
the 3060 or 3080. If you have any experience with these guys, please
let me know of any gotchas or recommended configurations.
I guess, specifically:
1. What is the recommended software client to go with these guys?
2. Where
Boson makes the getpass.exe program even though many others have it
through webpages and such they also have some other little things that
could come in handy like config register calculator and IP Subnet
calculator for those early mornings when the brain isn't working.
Thomas Larus wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
While Mr. Ladrach is almost certainly correct in his statement that the
CCIE
is less challenging that physics and calculus, he might be able to speak
more authoritatively once he has passed the Lab Exam.
As for being
Hello,
Had a question and been trying to figure this one out for a while now.
I have a router with an internal 205.10.1.0/24 network hanging off of fa0/0
and external connection to lots of other networks that start with 205. I
want to create a 205.0.0.0/8 static route pointing
--
TANSTAAFL
there ain't no such thing as a free lunch
Daren Presbitero wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
Hello,
Had a question and been trying to figure this one out for a while now.
I have a router with an internal 205.10.1.0/24 network hanging off of
fa0/0
Brute force for enable secret:
Too Many Secrets v0.7beta is a commandline tool to crack the enable
secret passwords on Cisco routers. You need the md5 password hash from
the config to run this tool. It contents dictionary and brute force
attacks and a nice feature to combine brute forcing with a
Please forward this to anybody you know !! Position: Network
ArchitectExperience
Level: 5-7 yrsLocation of Posting: JapanStart Date: January 15th 2003Contract
period: 9 monthsNo. Of People Required:3 Preferred Education: Bachelors
degree in Computer Science or related
discipline Job Description
Hey folks,
I'm sure someone has some hints on how to better keep the good technical
emails from this study group in my INBOX, and filtering out the overly
emotional emails that people send on a daily basis. That stuff clutters my
inbox and I end up wasting precious time reading them.
At 1:13 AM + 1/4/03, nrf wrote:
But if that's what this NG is all about, then
why even bother to post on the NG at all - why not just have a conversation
with yourself? That way you will always get the exact answer that you are
looking for. Should I do this? Well, of course, and by the
Oh. If so, I haven't seen any software for MD5 passwords, but the link I
emailed is definitely for downloading getpass! from Boson.
GM
-Original Message-
From: l0stbyte [mailto:[EMAIL PROTECTED]]
Sent: Friday, January 03, 2003 7:10 PM
To: [EMAIL PROTECTED]
Subject: Re: getpass!.exe
At 12:08 AM + 1/4/03, The Long and Winding Road wrote:
where you are going wrong is that you are pursuing your CCIE when you should
be pursuing your degree ;-
refer to that other thread that just won't die.
sorry, I can't resist.
Chuck, are you saying that the error is going 180 degrees in
Howard C. Berkowitz wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
At 12:08 AM + 1/4/03, The Long and Winding Road wrote:
where you are going wrong is that you are pursuing your CCIE when you
should
be pursuing your degree ;-
refer to that other thread that just won't die.
Thomas Larus wrote:
snip
As for nrf, - his contributions to groupstudy have been almost entirely
negative. While it is helpful to have some discussion of things like the
job
market and the question of whether it is better to invest time and effort
in
a degree versus certification is useful,
Marc Thach Xuan Ky wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
Thomas Larus wrote:
snip
As for nrf, - his contributions to groupstudy have been almost entirely
negative. While it is helpful to have some discussion of things like the
job
market and the question of
Just when you thought you were out, they suck you back in. You just can't
resist the temptation to rage against the machine...Hey! isn't that a grunge
band?
-Original Message-
From: The Long and Winding Road
[mailto:[EMAIL PROTECTED]]
Sent: Friday, January 03, 2003 9:54 PM
To: [EMAIL
This is hilarious guys. I am all alone at work a laughing in my chair. If
only someone was watching they would think I am crazy.
-Original Message-
From: Howard C. Berkowitz [mailto:[EMAIL PROTECTED]]
Sent: Friday, January 03, 2003 9:47 PM
To: [EMAIL PROTECTED]
Subject: Re: Q on Lab2
As many of you know, I've been reading Parkhurst's OSPF book for a number of
reasons. So I'm fooling around in the chapter on interface commands, when
something hits me over the head.
authentication can be done on an interface by interface basis!
one of those things that I just never noticed
At 2:54 AM + 1/4/03, The Long and Winding Road wrote:
Howard C. Berkowitz wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
At 12:08 AM + 1/4/03, The Long and Winding Road wrote:
where you are going wrong is that you are pursuing your CCIE when you
should
be pursuing
Hi Chuck,
I tried point-to-point instead of frame relay and still could not get
through.(Everything is fine except nssa)
In my understanding, the External type LSA (E1 or E2) will flood everywhere,
while for NSSA area, it change from type 5 to type 7. When I tried show ip
ospf database external on
For those who don't have the book in question -
Pg 17 of the Parkhurst OSPF book:
...In Cisco IOS Software Release 12.X, the authentication used on an
interface can be different from the authentication enabled for an area. When
using Cisco IOS Software release 12.X, the authentication method
Wei Zhu wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
Hi Chuck,
I tried point-to-point instead of frame relay and still could not get
through.(Everything is fine except nssa)
In my understanding, the External type LSA (E1 or E2) will flood
everywhere,
while for NSSA area, it
On Fri, 2003-01-03 at 21:52, Howard C. Berkowitz wrote:
In an industry where vampire taps were once the standard of
connecting to Ethernet cable, where zombies and daemons are common
software constructs, can a thread truly be said to be dead?
you just have to wait() for zombies to die.
I'm just curious, Chuck. When was the last time you had any sleep? :-)
Interesting subject tonight!
Shawn K.
-Original Message-
From: The Long and Winding Road [SMTP:[EMAIL PROTECTED]]
Sent: Friday, January 03, 2003 10:46 PM
To: [EMAIL PROTECTED]
Subject: Tonight's Homily -
Eric Rogers wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
For those who don't have the book in question -
Pg 17 of the Parkhurst OSPF book:
...In Cisco IOS Software Release 12.X, the authentication used on an
interface can be different from the authentication enabled for an
Deep Thoughts from Jack Handy.
I
I personally enjoy posts by nrf! Someone that has a sense of humor, its a
good thing.
Thank you and God bless,
Jack Handy
From: nrf
Reply-To: nrf
To: [EMAIL PROTECTED]
Subject: Re: CCIE Vs. BS or MS degree [7:59481]
Date: Sat, 4 Jan 2003 03:20:52 GMT
83 matches
Mail list logo