RE: OT well, sort of - IDS [7:61523]

2003-01-22 Thread Symon Thurlow
Thanks for your reply, I should have mentioned that the best solution need not be the cheapest. Cheers, Symon -Original Message- From: charles riley [mailto:[EMAIL PROTECTED]] Sent: 22 January 2003 03:39 To: [EMAIL PROTECTED] Subject: Re: OT well, sort of - IDS [7:61523] I like the

RE: OT well, sort of - IDS [7:61523]

2003-01-22 Thread Symon Thurlow
What about Cisco Secure IDS? -Original Message- From: charles riley [mailto:[EMAIL PROTECTED]] Sent: 22 January 2003 03:39 To: [EMAIL PROTECTED] Subject: Re: OT well, sort of - IDS [7:61523] I like the various SNORT products...non-proprietary (or as close as this field gets). SNORT

HELP..........FTP Problem [7:61549]

2003-01-22 Thread vikramjskeer
Hi All, I am facing a strange problem at a customer site over here. We have to access a FTP server(Win2k machine acting as FTP server). This server is siting on valid IP. We are using private IP range at our end. Now the issue is that when we try to get data from this server, we are able to

RE: HELP..........FTP Problem [7:61549]

2003-01-22 Thread Andrew Larkins
I had the same issue with another client. The answer was 2 fold. There is a bug that is fixed on ver 6.2.2(100) available from TAC - relates to PAT and FTP. Our particular problem was a cache engine that proxied the connection so the PIX dropped it - found this out from a packet sniff. For

RE: VPN client: Cisco or Microsoft? [7:61500]

2003-01-22 Thread Jay Dunn
We have a client with a requirement to set up win2k help desk stations at all of its remote plant locations. These stations are dedicated to the help desk function and should not allow any other traffic or web surfing. These stations also need to be idiot proof so the idea is to establish a

bandwidth [7:61552]

2003-01-22 Thread kaushalender
Hi group, I have a query Plz give anwserto it .Is it possible that if I have 2 customers which have circuits from me.Both having 64 Kbps bandwidth .If one customer is not utilizeing bandwidth than another customer can utilize that spare bandwidth whenever the another customer starts using

NAT translation table [7:61553]

2003-01-22 Thread Gabriele
hi! Does anyone knows if it's possible to export the cached NAT translation table (the one you get with sh ip nat trans) somehow? The export should occur in a specified time range (e.g every 10 seconds). I need the information for a software project about accounting of ip traffic. the software

Finding out of MAC address in Multilayer switch [7:61554]

2003-01-22 Thread Han Chuan Alex Ang
hi, I am trying to find out the MAC Address of certian IP in a multilayer switch , it seem that the only way is to go to that Valn and do a sniffing to discover , any other quick way from the console or from Cisco Work 2000, please advice , thanks Message Posted at:

RE: Automatic copying of the configuration scheduling [7:61538]

2003-01-22 Thread Mr piyush shah
James Thanks It is realy working fine. Thanks again Piyush --- James Willard wrote: You can check out Kiwi CatTools... http://www.kiwisyslog.com/products.htm#cattools (Hopefully the list didn't eat the URL, if so, go to www.kiwisoftware.com and click on CatTools). It's quite a

bandwidth problem on cisco routers!!! [7:61556]

2003-01-22 Thread Barbu Alexandru
Hi there! First of all i would like to know WHY is cisco hardware so damn great. Because i have been trying to create some bandwidth channels on a 2600 and its not working... I have read and read all kind of documentation for 3 days now and it won't work!!! I tried to do the same thing with a

RE: NAT translation table [7:61553]

2003-01-22 Thread Andrew Larkins
a script would be the only option as far as I can tell here. NO export ability as far as I know Andrew -Original Message- From: Gabriele [mailto:[EMAIL PROTECTED]] Sent: 22 January 2003 12:33 To: [EMAIL PROTECTED] Subject: NAT translation table [7:61553] hi! Does anyone knows if it's

Re: bandwidth problem on cisco routers!!! [7:61556]

2003-01-22 Thread Christ A. Saputra
Hi, As alternative solution is using bandwidth manager device, easier to create dynamic bandwidth partition, because of GUI it'll ready at only minutes... :-) Regards, Christ A. - Original Message - From: Barbu Alexandru To: Sent: Wednesday, January 22, 2003 3:11 AM Subject:

RE: bandwidth problem on cisco routers!!! [7:61556]

2003-01-22 Thread Raj Santiago
Hi , I suspect your using the wrong feature to accomplish your task. The feature you’re using: CBWFQ, is a queuing mechanism that kicks in when congestion is faced. The following is from CCO : The bandwidth assigned to a class is the guaranteed bandwidth delivered to the class during

RE: The New CCIE Written [7:61507]

2003-01-22 Thread Raj Santiago
Hi Ryan, check out www.@!#$.com . Its got allot of information regarding the new CCIE written exam. raj Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=61560t=61507 -- FAQ, list archives, and subscription info:

Re: Automatic copying of the configuration scheduling [7:61538]

2003-01-22 Thread Tim Metz
There's a perl script called cisco-conf which logs into Cisco gear and issues a copy run tftp or maybe copy start don't remember... anyway, excellent tool. http://search.cpan.org/author/JWIED/Cisco-Conf-0.10/ Tim Mr piyush shah wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...

RE: HELP..........FTP Problem [7:61549]

2003-01-22 Thread Raj Santiago
Hi Vikram, have tried connecting to the server using passive ftp ? I have encountered bugs relating to PAT as Andrew mentioned. The workaround I applied was to remove ip route-cache on the nat inside and outside interface. This was temporary till the bug was fixed offcourse...

Administrative Distance 5 for Summary EIGRP [7:61563]

2003-01-22 Thread [EMAIL PROTECTED]
How come you can see the EIGRP summary route with administrative distance of 5 in a real network? Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=61563t=61563 -- FAQ, list archives, and subscription info:

RE: Loading IOS / OT Now [7:61413]

2003-01-22 Thread Jens Neelsen
If you have a flash card formattet on a 3660 router try to read it on your 3640. Cisco has 3? different filesystems for flash cards. E.g. the format on a 7000/7500 or 6500 router / switch is different than on a 3640. Try to search cisco,com for flash card filesystems. Jens --- Erick B. wrote:

Re: bandwidth problem on cisco routers!!! [7:61556]

2003-01-22 Thread Barbu Alexandru
Thanks for the alternative, but i really want to see it working on my router. :)) I have cef enabled on the router. Does it interfere? --- Christ A. Saputra wrote: Hi, As alternative solution is using bandwidth manager device, easier to create dynamic bandwidth partition, because of GUI

Sniffer software: [7:61566]

2003-01-22 Thread Peri Sophos
Hi all , I wonder if anyone can help me :) , I am looking for software where I can load it on my laptop , and have it available , in case I have to use a sniffer at a particular site. I have a proper sniffer at my head office , however I do travel , and don't want to bring that huge thing every

RE: Loading IOS / OT Now [7:61413]

2003-01-22 Thread Jens Neelsen
Try this link: http://www.cisco.com/en/US/products/hw/routers/ps341/products_tech_note09186a00800a7515.shtml It should be ok, but check the IOS version! Jens --- Erick B. wrote: I use bnfs95 still but it was always an unsupported tool. Not aware of anything for 3com NetBuilders though. Old

RE: Sniffer software: [7:61566]

2003-01-22 Thread Aaron Ajello
these guys have one that seems okay http://www.linkferret.ws/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=61568t=61566 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct

RE: Sniffer software: [7:61566]

2003-01-22 Thread Andrew Larkins
www.ethereal.com This is much small than Network Associates sniffer and is freeware. Not resource intensive on the laptop. -Original Message- From: Peri Sophos [mailto:[EMAIL PROTECTED]] Sent: 22 January 2003 15:03 To: [EMAIL PROTECTED] Subject: Sniffer software: [7:61566] Hi all , I

Re: Automatic copying of the configuration scheduling [7:61539]

2003-01-22 Thread Jens Neelsen
Hi, Cisco Works and some third party utilities provide this function. Jens --- Mr piyush shah wrote: Dear all I have been assigned the task of copying a series of configurations in a router on a daily basis .I am tired of giving copy startup-config tftp command in each router . I was

RE: Connecting WIC-1DSU? [7:61487]

2003-01-22 Thread Petru Stefan
I think the correct cabling is DESCRIPTION PIN # COLOR Receive from Network (ring) 1 Blue/White Receive from Network (tip) 2 White/Blue Transmit from Network (ring)4 Orange/White Transmit from Network (tip) 5 White/Orange so in this case should be

Re: MSFC Rewrites CoS to 0 [7:61476]

2003-01-22 Thread [EMAIL PROTECTED]
From what I remember by head, if the switch is forwarding the packet on PFC or MSFC, it will use the configuration you set on the port - trust or do not trust. There are special case, though, were MSFC will set CoS to 0, but I can4t remember the any special case this moment. Jennifer

Re: Cat6500 PSU interoperability [7:60949]

2003-01-22 Thread Steve Lilley
We are successfully mixing 1300W and 2500W power supplies in the Cat6500s in our labs. We are running 6.3.3a on the switches, and power redundancy is functioning fine (even though the Cisco docs say it shouldn't): 6506_1 (enable) sh vers WS-C6506 Software, Version NmpSW: 6.3(3a) Copyright (c)

GRE vulnerability [7:61574]

2003-01-22 Thread Mohamad saro
I need to know the GRE vulnerability without using encryption Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=61574t=61574 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct

Traffic Shaping and LLQ on MSFC's and RSM's [7:61575]

2003-01-22 Thread Cohen, Michael
A friend of mine mentioned that it was not possible to do traffic shaping or LLQ on a VLAN interface located on an MSFC or RSM in a Catalyst 6500 and Catalyst 5500 respectively. Can anyone verify this. Cisco's feature navigator suggested that it certainly was possible on the MSFC but I didn't

username autocommand [7:61576]

2003-01-22 Thread Albert Lu
hello group, Has anyone got the 'username autocommand' command working? I can't get the autocommand to work, and only works when I put it in the line configs. This is what I'm trying to do from the Cisco DocCD, take a look at the 'who' username example.

Re: OT well, sort of - IDS [7:61523]

2003-01-22 Thread Sam Sneed
Snort is free and works great. Symon Thurlow wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Thanks for your reply, I should have mentioned that the best solution need not be the cheapest. Cheers, Symon -Original Message- From: charles riley [mailto:[EMAIL

priorize traffic on port 1050 [7:61578]

2003-01-22 Thread Frederico Madeira
How i give max priority to traffic on port 1050 ?? Frederico Madeira Coordenador de Suporte N. Landim Comircio Ltda PABX: 81. 3497.3029 e-mail: [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=61578t=61578 --

RE: NAT translation table [7:61553]

2003-01-22 Thread Vijay Ramcharan
This should be pretty easy to script using the scripting language of your choice. If you know VBScript, you can use a combination of SendKeys and regular expression searches to find the appropriate information and export/save to a CSV file. I've written something similar for one of our helpdesk

Re: Sniffer software: [7:61566]

2003-01-22 Thread Sam Sneed
I like this one better than ethereal and it is free http://analyzer.polito.it/ Peri Sophos wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi all , I wonder if anyone can help me :) , I am looking for software where I can load it on my laptop , and have it available , in case

RE: Sniffer software: [7:61566]

2003-01-22 Thread Peri Sophos
Thanks everyone :) -Original Message- From: Sam Sneed [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 22, 2003 5:10 PM To: [EMAIL PROTECTED] Subject: Re: Sniffer software: [7:61566] I like this one better than ethereal and it is free http://analyzer.polito.it/ Peri Sophos wrote

RE: PIX to Router -Urgent [7:61450]

2003-01-22 Thread Guruprasad Sanjeevi
A basic question to group and u. My internal network is 192.168.50.x my valid segment is 210.4.51.x network on which my internet router lies. To access these 2 networks I have linux machine with 2 NIC's one for 50.x and another for 210.x which is enabled as a router firewall. When I try to ping

Re: username autocommand [7:61583]

2003-01-22 Thread Tim Fletcher
Albert, Make sure you have the following configured: aaa new-model aaa authentication login default local-case aaa authorization exec default local It won't work without the authorization. -Tim Fletcher At 12:28 AM 1/23/2003 +1100, Albert Lu wrote: hello group, Has anyone got the 'username

Dynamic Natting [7:61584]

2003-01-22 Thread Hyman, Craig
ALL- Has anybody been able to do dynamic natting with a 1601R router using IOS 120221a? Have you been able to use multiple subnets( customer IP;s) and run them through one Nat address? Craig Hyman SRS Implementation Team Tier 2 Support [EMAIL PROTECTED] Broomfield Office 303-272-2661 Virtual

CSIDS amp; CSVPN (old ones) [7:61349]

2003-01-22 Thread Luke Yi
Has anyone used CSIDS CSVPN from boson? So far I passed CSPFA MCNS for my CCS1. I can not afford to fail any since it expires in feb. Any other good readings for those? I'll appreciate your input. Thanks heaps Luke Message Posted at:

New CCNP Exams [7:61426]

2003-01-22 Thread Clayton Dukes
Does anyone know when the new CCNP exams will be implemented? Clayton Dukes CCNA, CCDA, CCDP, CCNP, NCC Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=61426t=61426 -- FAQ, list archives, and subscription info:

Re: VPN client: Cisco or Microsoft? [7:61500]

2003-01-22 Thread Brad Ellis
You're asking a cisco-centric forum. Probably not the best place to get an un-biased opinion. But, since you ask, I use Cisco. :) thanks, -Brad Ellis CCIE#5796 (RS / Security) Network Learning Inc [EMAIL PROTECTED] www.ccbootcamp.com (cisco training) Sam Sneed wrote in message [EMAIL

Re: Connecting WIC-1DSU? [7:61487]

2003-01-22 Thread Brad Ellis
You need to make a T1 cross-over cable. Pins 1,2 go to pins 4,5 and reverse. check the archives on groupstudy as this has been talked about indepth before. thanks, -Brad Ellis CCIE#5796 (RS / Security) Network Learning Inc [EMAIL PROTECTED] www.ccbootcamp.com (cisco training) Mike Mihalas

RE: T1 and Frame Relay Sniffers [7:61531]

2003-01-22 Thread William Pearch
I have some experience with the Fireberd 6000s with various interfaces - and I use the Agilent Advisor software version on a near daily basis - I really like it's h.323 capabilities. I did not know that TCC was now Acterna - one of my co-workers has been crowing about his old Domino Wan boxes

Re: Finding out of MAC address in Multilayer switch [7:61554]

2003-01-22 Thread Larry Letterman
If the switch is running ios and routing, then issue the following: # show ip arp x.x.x.x(ip address) the router will show you the mac address... Larry Letterman Network Engineer Cisco Systems - Original Message - From: Han Chuan Alex Ang To: Sent: Wednesday, January 22, 2003 2:39 AM

RE: PIX to Router -Urgent [7:61450]

2003-01-22 Thread Robert Perez
All depends if you setup natting within the Linux box. If not the IP will stay the same and never change. -Original Message- From: Guruprasad Sanjeevi [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 22, 2003 10:30 AM To: [EMAIL PROTECTED] Subject: RE: PIX to Router -Urgent [7:61450]

Re: OT: Making data centers HIPAA compliant - what is [7:61588]

2003-01-22 Thread Howard C. Berkowitz
At 8:06 PM + 1/20/03, Charles Riley wrote: Priscilla, Thank you for the reply. I had actually already checked most of these sites here. There is a great focus on getting the providers into compliance, but very little information about certifiying the networks, servers, storage devices, and

Cisco VPN Client 4.0 -- BETA [7:61589]

2003-01-22 Thread Robert Raver
Hey, For all those interested the 4.0 VPN Client(BETA) will be in March/April. This VAN Client is totally rebuilt and has some very nice new features. Thought I would just let everyone know. Thanks, Robert Raver Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=61589t=61589

IETF problem(per DLCI/per Interface)Urgent [7:61590]

2003-01-22 Thread Simmi Singla
Hi All, Problem 1) Can anybody explain me cofiguring IETF encap on the main interface and confguring ietf per dlci on the sub interface,what coul be implications. My Topology centrral routerswitch--remote-ends(non cisco)(many cisco

Re: IETF problem(per DLCI/per Interface)Urgent [7:61590]

2003-01-22 Thread Juntao
u can use cisco encapsulation for cisco routers and ietf for all others. what encapsulation is to be configured on the main interface depends on how many non-cisco and cisco routers u have. if you have, say, 7 cisco and 3 non cisco, u can use cisco encapsulation on the main interface and then

Re: priorize traffic on port 1050 [7:61578]

2003-01-22 Thread Juntao
priority queuing will do the job. watch for delay sensitive traffic ... Frederico Madeira a icrit dans le message de news: [EMAIL PROTECTED] How i give max priority to traffic on port 1050 ?? Frederico Madeira Coordenador de Suporte N. Landim Comircio Ltda PABX: 81. 3497.3029 e-mail:

RE: ATM PVC discovery [7:61585]

2003-01-22 Thread Madisa Ramagoffu (MM)
Team help needed on configuring inarp on the atm. * you are given the first octed of the addresss 10.*.*.*/224 interface ATM1/0 no ip add atm ilmi-keepalive atm ilmi-pvc-discovery pvc 0 0/16 ilmi

RE: callmanager and h323 gateway question [7:61529]

2003-01-22 Thread supernet
JM, Can I send to unity? I want unity to handle extension transfers. I used similar configuration and hear unity greetings but it didn't accept anything I punched. Looks like it won't release to CCM. Thanks. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf

Switching Exam 640-604 [7:61593]

2003-01-22 Thread James Gosnold
Hi ladies and gentlemen, Does anybody know if trunking with ATM LANE is something still featured on the exam? Just wondering how much time to spend studying it as there is a chapter in my book but it is an old book. I'm not even sure if this is an old technology, just something I haven't come

RE: callmanager and h323 gateway question [7:61529]

2003-01-22 Thread J M
I used similar configuration and hear unity greetings but it didn't accept anything I punched Have you tried this under the dial-peer ? dtmf-relay h245-alphanumeric Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=61595t=61529

RE: Loading IOS [7:61413]

2003-01-22 Thread Lauren Child
As far as Im aware you can only use the ATA flash disks on Windows PCs, and not the older linear flash PCMCIA cards. Itd probably use a different filesystem anyway, although Ive not tried it. There is a Linux utility to access cisco filesystems on pcmcia card.http://www.si.org/cffs/ Hope that

Catalyst 3548G [7:61597]

2003-01-22 Thread Eduardo Perestrelo
Hi, I have 3 catalyst 3548G with 48 port fast ethernet and 1 port of gigabit ethernet. One time the energy is down and all switches go down. I start switch when return energy and ALL switches not work properly. Switches signal all ports in yellow. I connect on console and see rom

Re: route-map no-export - not working!! [7:61480]

2003-01-22 Thread Darrell Newcomb
Xueyan's comments about changing permit and deny's would work. But I think the big thing you are missing here is you're tagging something no-export on the way out of AS34. That will pass the route to the neighboring AS and then they shouldn't pass it on to their neighboring AS's. If you wanted

Re: Odd and Even routes --- Puzzling?? [7:61456]

2003-01-22 Thread Cisco Nuts
Chuck, The trick was to match all networks, not just the 200 networks. #access-list 99 permit 0.0.0.0 255.254.255.255 matched any even network and then allowed the others to come in Thanks once again. Sincerely, CN From: Chuck Larrieu To: \Cisco Nuts\ Subject: Re: Odd and Even routes ---

Re: route-map no-export - not working!! [7:61480]

2003-01-22 Thread Cisco Nuts
You guys are absolutely right!! I had to filter inbound NOT outbound.Big difference!! This route-map matched all routes that traversed AS1000 and set the community to no-export and thus they were not advertised out of AS34. Thank you so much for all your help, guys. Sincerely, CN From:

RE: Cat6500 PSU interoperability [7:60949]

2003-01-22 Thread Frank Jimenez
That's really interesting - I noticed at the bottom of the config that each PS looks like it is only generating 1150W. PS1 Capacity: 1153.32 Watts (27.46 Amps @42V) PS2 Capacity: 1153.32 Watts (27.46 Amps @42V) I'm guessing that somewhere along the way, a check was added for this situation and

Re: Cisco VPN Client 4.0 -- BETA [7:61589]

2003-01-22 Thread Charles Riley
Robert, What new features does it have,and what problems will it solve? TIA, Charles Robert Raver wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hey, For all those interested the 4.0 VPN Client(BETA) will be in March/April. This VAN Client is totally rebuilt and has some

RE: MTU and TCP in PIX [7:61441]

2003-01-22 Thread BJ Rice
Actually the PIX by default will allow fragmented packets. This can be a vulnerability for the PIX. A good policy is to enable FragGuard on the PIX. This insures the PIX sees the entire seegmented packet before letting it pass through its outside interface. Message Posted at:

DLCI value range issue(dependency with LMI) [7:61604]

2003-01-22 Thread Simmi Singla
Hi all, I have read in books that dlci value range is dependent on lmi type configured. Example The following DLCI ranges are based on LMI protocol: ANSI: 16 - 991 CISCO: 16 - 1007 Q933a: 16 - 991 But when we configure LMI type as example take ansi on cisco router so after this when we

RE: CCIE program [7:61405]

2003-01-22 Thread [EMAIL PROTECTED]
Well, they can't even spell it right (at least on my plaque it says Internetwork Expert not Internetworking Engineer), so what does that tell you? Mitch -Original Message- From: Peter Walker [mailto:[EMAIL PROTECTED]] Sent: Monday, January 20, 2003 2:54 PM To: [EMAIL PROTECTED] Subject:

FW: IP Helper, Expected behavior? [7:61607]

2003-01-22 Thread Waters, Kristina
Everyone, I'm in the process of changing my internal IP addresses and ran into a problem on the first site I went to swap. Clients obtain their ip from a dhcp server at my location, so I added a secondary ip address to the remote router as shown below: interface Ethernet0 ip address 172.16.x.x

Re: IETF problem(per DLCI/per Interface)Urgent [7:61590]

2003-01-22 Thread Simmi Singla
Hi, Thanx for the reply,this ietf is cleared but another doubt came what advantages again specifying broadcast keyword on the sub interface then on main interface as frame-relay dlci can have broadcast keyword. Whats is the good practise whether by default we should enable broadcast

DLCI value range issue(dependency with LMI) [7:61608]

2003-01-22 Thread Simmi Singla
Hi all, I have read in one of the books and internet also that dlci value range is dependent on lmi type configured. Example The following DLCI ranges are based on LMI protocol: ANSI: 16 - 991 CISCO: 16 - 1007 Q933a: 16 - 991 But when we configure LMI type as example take ansi so after

Call Manager 3.1 [7:61610]

2003-01-22 Thread Juan Blanco
Team, I want to be able to do some testing with Call Manager, the problem that I am having is that during the install it is detecting which hardware I have and it abort the installation when it find out that I have not the recommended hardwareDo you guys know any workaround this, It is only

Re: Cisco VPN Client 4.0 -- BETA [7:61589]

2003-01-22 Thread Robert Raver
Charles, Some of the new features will include: -New SHIM Interface(This is the biggest) -This will let it run with other VPN Clients on the machine -This will let it work with DNS/WINS allot better. -With the new SHIM interface it will support products such as NetMeeting -It

Re: DLCI value range issue(dependency with LMI) [7:61608]

2003-01-22 Thread MADMAN
Sounds about right. In the Lucent 9000 frame realy switch doc, this is a carrier class switch, it list the range of 16-001 as available for all LMI types and 16-1007 for LMI Rev1 which is the same a Cisco LMI. 1-15 and 1008-1023 are reserved. Dave Simmi Singla wrote: Hi all, I have read

RE: Administrative Distance 5 for Summary EIGRP [7:61563]

2003-01-22 Thread David j
Doing manual summarization per interface you can see it. For example ip summary-address eigrp 1 172.0.0.0 255.0.0.0 (don't try it in a production network without understanding it clearly, first time I did it I have an important routing problem) [EMAIL PROTECTED] wrote: How come you can see

ASBR in backbone area?? [7:61614]

2003-01-22 Thread ericbrouwers
Hi there, Cisco Press' CCNP Routing Exam Certification Guide advises to place an ASBR in the backbone area (p. 290, chapter 6): ... If there is any redistribution between other protocols to OSPF on a router, it will be an ASBR. Although you can place this router anywhere in the OSPF hierarchical

Wrong definition type 4 summary LSA for ASBRs [7:61615]

2003-01-22 Thread ericbrouwers
Hi, For those that are reading Cisco Press' CCNP Routing Exam Certification Guide: there is a very confusing definition of type 4 summary LSAs on page 292, chapter 6: The AS external ASBR summary link- This LSA is sent to a router that connects to the outside world (ASBR). It is sent from the

Re: IP Helper, Expected behavior? [7:61607]

2003-01-22 Thread Larry Letterman
The broadcast will only advertise out the primary ip address to the dhcp server. You will need to have a server that can work with primary and secondary scopes... Larry Letterman Network Engineer Cisco Systems - Original Message - From: Waters, Kristina To: Sent: Wednesday, January

OSPF 30 minutes topology table exchange [7:61617]

2003-01-22 Thread ericbrouwers
Hello, Again for those reading Cisco Press' CCNP Routing Exam Certification Guide. It's not clear to me how often the OSPF topology table is exchanged by default. I thought this happened every 30 minutes, regardless of other recent updates. The cert. guide is not consistent about this: Page

OSPF hello implementation [7:61618]

2003-01-22 Thread ericbrouwers
For those reading Cisco Press' CCNP Routing Exam Certification Guide: Sorry to bother you again. Chapter 4, page 178, suggests the use of TCP to exchange OSPF hello packets: ... To understand this complexity, it is useful to identify the main characteristics of OSPF. These key attributes of OSPF

Why is OSPF E1 route preferred over E2 route? [7:61619]

2003-01-22 Thread ericbrouwers
Hi, Why is an E1 route preferred over an E2 route for the same destination? The cost of an E1 route is the sum of the external reported cost and the internal cost used to reach that destination. The cost of an E2 route is always the external cost, irrespective of the internal cost to reach that

RE: OSPF hello implementation [7:61618]

2003-01-22 Thread Priscilla Oppenheimer
ericbrouwers wrote: For those reading Cisco Press' CCNP Routing Exam Certification Guide: Sorry to bother you again. Chapter 4, page 178, suggests the use of TCP to exchange OSPF hello packets: ... To understand this complexity, it is useful to identify the main characteristics of

Re: FW: IP Helper, Expected behavior? [7:61607]

2003-01-22 Thread bergenpeak
WHen the DHCP packet is forwarded, the DHCP relay agent will insert the primary IP address of the interface the packet was received on into the DHCP packet's giaddr field. When adding secondaries to an interface where you're doing DHCP, make sure: - routing to the primaries and secondaries is

RE: Wrong definition type 4 summary LSA for ASBRs [7:61615]

2003-01-22 Thread Priscilla Oppenheimer
ericbrouwers wrote: Hi, For those that are reading Cisco Press' CCNP Routing Exam Certification Guide: there is a very confusing definition of type 4 summary LSAs on page 292, chapter 6: The AS external ASBR summary link- This LSA is sent to a router that connects to the outside

RE: Traffic Shaping and LLQ on MSFC's and RSM's [7:61575]

2003-01-22 Thread John Humphrey
I've encountered this issue in our production environment with policy-maps. Here's the answer Cisco's TAC gave me. Since the msfc interfaces are software based, the MLS engine will bypass the route processor on most of your layer 3 packets. This prevents the shaping/policing policy from being

RE: IETF problem(per DLCI/per Interface)Urgent [7:61590]

2003-01-22 Thread Priscilla Oppenheimer
Juntao gave you good answers, but I thought I'd comment on the issue of whether you should shut down a serial interface before changing the encapsulation. It is the polite thing to do, although it's not necessary to get it to work. It sounds like you were using PPP before. Remember that the Link

Re: bandwidth problem on cisco routers!!! [7:61556]

2003-01-22 Thread John Humphrey
In my humble opinion, cef should not interfere with any of your qos commands (if anything it helps). As a matter of fact CEF is required when using certain types of class/policy maps. It sounds to me like custom queuing would better suit your needs. You probably already know this but custom

RE: bandwidth [7:61552]

2003-01-22 Thread Priscilla Oppenheimer
kaushalender wrote: Hi group, I have a query Plz give anwserto it .Is it possible that if I have 2 customers which have circuits from me.Both having 64 Kbps bandwidth .If one customer is not utilizeing bandwidth than another customer can utilize that spare bandwidth whenever the

RE: HELP..........FTP Problem [7:61549]

2003-01-22 Thread Priscilla Oppenheimer
It could be a bug or it could just be that FTP is a huge pain to get working with NAT and firewalls due to its behavior. Firewalls at either end, including a personal firewall on the end system, can wreak havoc. Changing to passive might help because then the server doens't try to open a session

Re: Why is OSPF E1 route preferred over E2 route? [7:61619]

2003-01-22 Thread bergenpeak
In the docs I've read (and I think this was posted on this list as well), one might use E2s when you've got one exit point that is always prefered over the other(s). This might happen if you've got 2 ISPs and one configured as a backup only. The primary exit point is always prefered, regardless

RE: Switching Exam 640-604 [7:61593]

2003-01-22 Thread John McCartney
James, I took it in Oct 2001 (504) and had no ATM ?'s, not sure about lately (604). HTH's John Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=61631t=61593 -- FAQ, list archives, and subscription info:

RE: MTU and TCP in PIX [7:61441]

2003-01-22 Thread Priscilla Oppenheimer
BJ Rice wrote: Actually the PIX by default will allow fragmented packets. That's not very nice of it. :-) This can be a vulnerability for the PIX. A good policy is to enable FragGuard on the PIX. This insures the PIX sees the entire seegmented packet before letting it pass through its

Re: switch 6506...very urgent [7:61544]

2003-01-22 Thread John McCartney
I installed a 16 port Gig-E and it worked fine at an ISP I used to work at. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=61633t=61544 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report

RE: ICMP Traffic [7:61453]

2003-01-22 Thread Priscilla Oppenheimer
Johan Bornman wrote: Priscilla and the rest of the group, Thanks for your reply. No, I don't want to prioritize ICMP, my mistake, only telnet traffic. More questions though. 1. Do I have to add the priority-list 1 protocol ip high tcp telnet on both sides of the link as Where are

Is my PIX dead? NOOOOO!!! [7:61635]

2003-01-22 Thread Lamy Alexandre
I am in despair. I have a PIX 515, and I think its dead. Since a bought it used, I worked on it only 5 times. I put the IOS 6.2 to use it, and everything was going perfectly. Suddenly, it made an error of the type Watch dog failure. I had to reboot. (I don't remember if I had already rebooted

RE: Call Manager 3.1 [7:61610]

2003-01-22 Thread J M
FOR A TEST OR LAB ENVIRONMENT ONLY!- If you want to run Call Manager on a test server, you can install windows 2000 (from microsoft cds) and add this key to the registry. This will allow you to install CM. paste these lines into a text file, save is as makemcs.reg and double click it. This

RE: username autocommand [7:61637]

2003-01-22 Thread Albert Lu
I've got these statements in there, but it still wouldn't work aaa authentication login VTY local-case enable aaa authorization exec VTY local login authentication VTY Albert -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Matthew Poole Sent: Thursday,

RE: username autocommand [7:61583]

2003-01-22 Thread Albert Lu
I've got these statements in there, but it still wouldn't work aaa authentication login VTY local-case enable aaa authorization exec VTY local login authentication VTY Albert -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Tim Fletcher Sent: Thursday,

RE: callmanager and h323 gateway question [7:61529]

2003-01-22 Thread supernet
That's it! That's the command I missed. Thanks!! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of J M Sent: Wednesday, January 22, 2003 10:10 AM To: [EMAIL PROTECTED] Subject: RE: callmanager and h323 gateway question [7:61529] I used similar

Re: DLCI value range issue(dependency with LMI) [7:61608]

2003-01-22 Thread Simmi Singla
Hi Dave, Thanx for the reply,but I am still not clear Sounds about right. In the Lucent 9000 frame realy switch doc, this is a carrier class switch, it list the range of 16-001 as available for all LMI types and 16-1007 for LMI Rev1 which is the same a Cisco LMI. 1-15 and 1008-1023 are

RE: IETF problem(per DLCI/per Interface)Urgent [7:61590]

2003-01-22 Thread Simmi Singla
Thanx Priscilla , Now It is cleared as Cisco documentation also says so,I checked on web site. Can You Please put some light on my other question which I posted to group regarding DLCI Values range with LMI dependency. Thanx once again Priscilla Oppenheimer wrote: Juntao gave you good answers,

RE: jeff's routing tcp/ip v1 question [7:61360]

2003-01-22 Thread cebuano
Hi, The reason for this is that although RIP treats these two networks as separate entries residing on the SAME physical link, only the PRIMARY address is used to send the packets. In other words, the 2ndary networks are reliant on the primary address for delivering the packets. 2ndaries are used

Re: DLCI value range issue(dependency with LMI) [7:61608]

2003-01-22 Thread Priscilla Oppenheimer
I think he had a typo and meant to say 16-991 for everything except LMI Rev 1 (Cisco). With LMI Rev 1 (which is the same as cisco), the DLCI range is 16 - 1007. He was agreeing with your list. As far as why does a Cisco router still say that DLCIs 16 - 1007 are available even after you configre

Re: DHCP Relay on cisco 3002 [7:61486]

2003-01-22 Thread Randy Rodriguez
Cog - DHCP relay is not yet supported on the 3002 Cisco VPN product line. Had a customer that wanted to do that instead we had to utilize the the internal pool to provide addresses. Regards, Randy On Tue, 21 Jan 2003 20:09:47 GMT cog writes: I have a 3002 at a remote site in Network

  1   2   >