Chuck,
If I'm the Ken you're talking about and I actually said that, then I
must really need a nap. :-)
We're a university, where Microsoft rules. :-(
I'd like to tell you how many MS-SQL servers we have, but I don't have
a clue. There are probably some running in the dorms. We have entire
l
Cisco Internetwork Operating System Software
IOS (tm) 2500 Software (C2500-D-L), Version 12.0(21), RELEASE SOFTWARE (fc1)
Copyright (c) 1986-2001 by cisco Systems, Inc.
Compiled Mon 31-Dec-01 18:25 by nmasa
Image text-base: 0x03038AE4, data-base: 0x1000
ROM: System Bootstrap, Version 4.14(9.1)
Hi Buddy,
In my network i hv 3548 Access Switch. Today i saw
in show running-conf following mesg is coming.and that
purticular command is not given by anybody.
no spanning-tree vl vl number
right now this mesg is for only 5 vlans. and i hv 20
vlans in my network.
Thanks & Regards,
Milind Tar
I would check to see what your security policy is first before turning
on split tunneling. If a clients laptop or machine is compromised then
the violator could possibly have access to your network at that point.
Though this is not the correct technical terms I see split tunneling as
a dual homed p
Configure the aaa, but use local login. You do need the aaa configuration
for SSH to work.
Doug
-Original Message-
From: Richard Campbell [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, January 28, 2003 12:07 AM
To: [EMAIL PROTECTED]
Subject: must I have aaa server to configure SSH on PIX? [7:6
Hi Everybody,
I'm almost finished reading Managing Cisco Network Security by Michael
Wenstrom. I plan to take the 640-100 exam soon. Can anyone recommend some
quality practice tests? Also, has anyone taken the new 640-100 exam? Thank
you in advance.
Joseph R. Taylor
MCSE, CCNP
Message
Passed yesterday 902/1000
Preparation mostly based on IOS 12.2 security guides and I also look through
Wenstrom book too
(Embedded
image moved "Joseph R. Taylor"
Guys,
can you please help
we have this setup at the moment and we wish to upgrade to 6513..(these
are server farm switches and we need more ports basically )..
what i want to know is if i use the PSU from the 6509`s (see below) will
they work ok in the current config ..i.e redundent mod
Good Morning Sergey,
Congrats on passing the exam. Was it the new Flash type exam where you
actually enter commands? Also, what study reference did you use for the IOS
12.2 Security Guides. Someone in here asked me what passing score is
required for this exam.
Thank you
do a "show environment all"
That will show you the cuurent load on the power supplies, then you can
decide
Andrew
-Original Message-
From: steve [mailto:[EMAIL PROTECTED]]
Sent: 28 January 2003 15:57
To: [EMAIL PROTECTED]
Subject: 6509-6513 power-supplies [7:62020]
Guys,
can you plea
I am sorry i am late in getting back to you.. You have answered my
question precisely You just cleared all the doubts i had... I donot
think we can get any better explanation than this.Thank you very much.
-Original Message-
From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED
I have a mail server that handles email for 2 domains.
I am trying to map 2 global addresses to 1 internal server. I am receiving
the following error:
ERROR: static overlaps with /25 to /25
What is the command to fix this?
Thanks in advance...
Message Posted at:
http://www.groupstudy.com/for
Are there any study groups for CISSP / CCSP in my area? Palm Beach or
Martin County Florida areas..
i'm looking at the Pix Firewall test first...
Thanks in advance..
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62025&t=62025
---
It might help to send the snip of your router configuration.
Marko.
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> Sent: ~ripjudagur, 28. janzar 2003. 14:55
> To: [EMAIL PROTECTED]
> Subject: Static overlaps error??? [7:62024]
>
>
> I have a mail server t
Is there a way to devote separate memory space for ACLs?
I just opened a TAC case; but I'm still having problems with my lists
getting dropped, I've even went so far as to delete all the entries and
reenter only a couple.
Scenario: I shell into the router, add one additional host to access-list
I'm testing this very scenario at the moment. Just force the use of EAP
and turn off Open and Shared authentication.
I would probably pick (LEAP/PEAP + (BKR or TKIP)) or IPSEC. Although the
IPSEC-only route wouldn't afford you the ability to deny surfing from
the DMZ. EAP locks down the network ac
Hi Everyone,
I'm interested in knowing how good Richard A. Deal's books are.
Especially in reference to MCNS. Thank you in advance.
Joseph R. Taylor
MCSE, CCNP
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62027&t=62027
--
FAQ
His PIX firewall book is OK. It does have a lot of errors in it though. Hope
his other books have proofreaders.
""Joseph R. Taylor"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi Everyone,
> I'm interested in knowing how good Richard A. Deal's books are.
> Especially in
Do this on the Pix, in configuration mode:
hostname
domain
ca zeroize rsa
ca generate rsa key 1024
ca save all
ssh 209.100.11.0 255.255.255.0 outside
ssh 0.0.0.0 0.0.0.0 inside
passwd
enable password
write mem
Now when you SSH into the Pix, SSH version 1 only, the username will be
"pix" and the
What router and image is this happening on?
John
>>> "[EMAIL PROTECTED]"
1/28/03 8:47:57 AM >>>
Is there a way to devote separate memory space for ACLs?
I just opened a TAC case; but I'm still having problems with my lists
getting dropped, I've even went so far as to delete all the entries
and
Ask him yourself, he contributes to this group ;-) Rich's books are quite
good. He clearly expresses his points and doesn't get lost in non-relevant
idioms.
Will Gragido CISSP CCNP CIPTSS CCDA MCP
9450 W. Bryn Mawr Ave.
Suite 325
Rosemont, Il 60018
www.ins.com
[EMAIL PROTECTED]
-Original M
The router is a 3640.
I'm using the following image: c3640-ik9o3s-mz.122-11T
-Original Message-
From: John Neiberger [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, January 28, 2003 10:27 AM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Re: ACL memory space [7:62028]
What router and im
I think his PIX book is very good. I've not found many errors in it but then
maybe I've not looked at it in as much depth as you have. If I have a gripe
about it it's for one thing. I use it as a desktop reference. Sometimes I'm
looking up how to accomplish "X" and find out that before I can do tha
Hmm you must have some freakin' long ACLs! :-) Still, that's
pretty strange behavior. I don't know if the feature is available on
that platform but you might try using "access-list compiled" to allow
the router to process them more efficiently. I doubt that would even
help this problem, tho
Team,
When you take the recert exam for your CCNP do you have to take it before
your cert expires? If your cert expires before you take that test then does
that mean you need to retake all 4 exams again?
Travis Bolton
Web Media
CCNP,CCDA
"Try not to become a man of success, but rather try to b
This problem is thoroughly baking my noodle so I thought I'd post it
here. It involves some hardware and software I wouldn't normally be
involved in, but they've come to me for help.
We have Novell Migration Agent running on a bunch of servers in our
network. The MA is in constant communication
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Windows 2000 ias works fine. Free when you already bought the product ;-)
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00800b6099.shtml
aaa-server RADIUS protocol radius
aaa-server partnerauth protoco
Pretty much, the cmd. and config guides on cco. You will be pretty much
set.
Read on how to configure "strange topics" like DLSW+, Mobile IP, WCCP
etc.
I have been reading these guides for a couple of months now, and I am
still reading..
Obviously, you need to be practicing pretty much each
That's already been said (in fact - it was mentioned earlier in this thread
and was included below); but that can take time to run ... the only reason I
brought up LinNT (aside from just suggesting an alternative) is because it
take 10 minutes, counting the time for two server reboots :).
Thanks!
One wordL0phtCrack
Will Gragido CISSP CCNP CIPTSS CCDA MCP
9450 W. Bryn Mawr Ave.
Suite 325
Rosemont, Il 60018
www.ins.com
[EMAIL PROTECTED]
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Evans, TJ (BearingPoint)
Sent: Monday, January 27, 2003 3:58
interface ethernet1 auto
interface ethernet2 auto shutdown
mtu outside 1500
mtu inside 1500
mtu DMZ 1500
global (outside) 1
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
static (inside,outside) tcp smtp 192.168.0.1 smtp netmask
255.255.255.255 0 0
I tried to add another statement below my last that read:
Yes, and I just reinforced my knowledge of this having just my CCNP expire
this past Friday without taking the recert exam. Even though I have my
CCDP, I have to take all CCNP tests over again.
-Original Message-
From: Bolton, Travis D [LTD] [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, Janu
I have a web server with an inside local 192.168.0.5 and with static NAT I
make an association with the inside global (e.g.) 222.222.222.222
(config)# ip nat inside source static 192.168.0.5 222.222.222.222
I can acces the web server from the internet and I can access the web server
from my priva
I believe if you turn just EAP on, you'll get a dynamic WEP key for unicasts
but you'll need to specify the static WEP key to be used for
broad/multicasts. If you turn EAP with broadcast key rotation on, you don't
need to specify a static WEP key for broad/multicasts because the AP will
create and
I am using 3 interfaces, Inside 100 and Eth2(Vendor1) 90 and eth3(Vendor2)
80
I want all traffic leaving the inside going to ethernet 2 to not have nat.
So I have setup statics as follows:
access-list vendor1-outbound permit tcp host 204.26.258.32 host
254.254.254.254 eq ftp
access-list vendor1-
Anyone have any insight on the pro's or con's regarding applying trunks to
all 10/100 access ports on a 6509. Presently, I have a cisco voIP
environment - using a data vlan and an auxiliary vlan for voice traffic.
I've been asked to make an avaya phone work in this environment. Input from
Avaya
At 4:57 PM + 1/28/03, John Neiberger wrote:
>Hmm you must have some freakin' long ACLs! :-) Still, that's
>pretty strange behavior. I don't know if the feature is available on
>that platform but you might try using "access-list compiled" to allow
>the router to process them more efficien
Hello everyone,
I would like to install a PIX behind a router and had some questions...
1. Can the VPN clients connect to a public ip that translates ( static nat )
to the private ip assigned to the outside interface of the PIX?( if i use
esp)
2. Will it work if I use IKE Mode Configuration to a
I think I should be able to do Nat on a stick but I don't have that
version of the IOS. Do you know where I can get
Cisco IOS. version 12.1(5)T9
Thanks in advance I appreciate the help.
Lupi, Guy wrote:
> You may also want to have a look at this link "NAT on a stick":
>
>
http://www.cisco.com
Hello People...
Do you guys know where I can get some labs to play with MPLS. I got
some 7200 routers and some 2651 routers.
Thanks...Nabil
"I have never let my schooling interfere with my education."
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62049&t=62049
Is there any differnce between smart serial and hssi (high speed serial
interface) or are they one and the same as far as hardware connectors go.
thank you
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62050&t=62050
--
FAQ, lis
Glad to help Thomas.
My experience with lower-end 2600's (2611/2621) is that they can reach
approximately 500-750Kbps of 3DES IPsec performance (depending upon
traffic type; purely 1440-byte packets might get you north of 800Kbps).
The 831 is rated, as per Cisco
(http://tools.cisco.com/cmn/jsp/ind
Normally you would want to fix the ports on connections you know will not
change, like trunks, routers, servers, etc. You do have to watch out for
vendor implementations however. When troubleshooting issues with an IBM
2216 router (think 7507 with CIP) I found a tech note from IBM stating that
sw
Anyone heard about having problems with NAT and running VoIP.
I want run VoIP across a DSL link with NAT.
Thanks in advance.
neil K.
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62053&t=62053
--
FAQ, list archives, and subscr
>Normally you would want to fix the ports on connections you know will
not
>change, like trunks, routers, servers, etc. You do have to watch out
for
>vendor implementations however. When troubleshooting issues with an
IBM
>2216 router (think 7507 with CIP) I found a tech note from IBM stating
tha
Anybody passed CCNP recertification test recently. Any suggestions, what to
look for and what books to refer.
Thanks,
neil K.
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62055&t=62055
--
FAQ, list archives, and subscription
. wrote:
>
> Is there any differnce between smart serial and hssi (high
> speed serial
> interface) or are they one and the same as far as hardware
> connectors go.
>
> thank you
>
>
They are not one and the same. The HSSI interface is mechanically identical
to the SCSI2 connector, which is a
HSRP PROBLEM
x.x.x.36 and x.x.x.37 are two routers.
x.x.x.x.36 config:
standby 1 ip x.x.x.35
standby 1 priority 150
standby 1 preempt delay minimum 2
standby 1 track serial0 10
x.x.x.x.37 config:
standby 1 ip x.x.x.35
standby 1 priority 140
standby 1 prempt
standby 1 track serial0 20
Problem
Hello
I need to implement VPN, which will be able to used by data transfers
and VoIP with server on public IP and clients, connected to internet by
xDSL router/modem/switch with real dynamic IP (allocated by DHCP).
As far as I understood, I need to setup IPSec tunnel from CO to each
client. And V
You may indeed experience issues with NAT and VoIP. You will have to
revisit your NAT pool and review the address schema for your IP telephony
end points and most likely adjust your pools accordingly. This will also,
depending on the size of the deployment and enterprise, probably cause you
to ha
Thanks much Paul! Now I am waiting to get those boxes :).
Thomas.
""Paul Forbes"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Glad to help Thomas.
>
> My experience with lower-end 2600's (2611/2621) is that they can reach
> approximately 500-750Kbps of 3DES IPsec performan
If this is the same thread I thought Mike wrote back to me that is
was something like 64 lines, that's nothing. If you open a case with
Cisco they will probably tell you to upgrade. I'll save you the
trouble, try upgrading, 12.2.13T is available :)
Dave
Howard C. Berkowitz wrote:
> At 4:5
Heck, we have one that's over 120 lines long! :-) It's a tad complex.
John
>>> "MADMAN" 1/28/03 2:25:20 PM >>>
If this is the same thread I thought Mike wrote back to me that is
was something like 64 lines, that's nothing. If you open a case with
Cisco they will probably tell you to upgrade
Hello listers,
does anyone know the technical difference between the
ws-x6148-rj-45 and ws-x6348-rj-45 modules for the
cat6500 switches?
the price difference is very significant though the
documentation on Cisco's web site doesn't show any
technical difference.
Rgds,
dayo
__
HSRP PROBLEM
x.x.x.36 and x.x.x.37 are two routers.
f0 interface config:
x.x.x.x.36 config:
standby 1 ip x.x.x.35
standby 1 priority 150
standby 1 preempt delay minimum 2
standby 1 track serial0 15
f0 interface config:
x.x.x.x.37 config:
standby 1 ip x.x.x.35
standby 1 priority 140
standby 1 p
what are the routers connected too that allows the routers
to talk hsrp to each other...?
Larry Letterman
Network Engineer
Cisco Systems
- Original Message -
From: "Raj"
To:
Sent: Tuesday, January 28, 2003 2:03 PM
Subject: URGENT HSRP PROBLEM [7:62064]
> HSRP PROBLEM
>
> x.x.x.36 and
Sorry, I don't have time to look into your problem. Try the Cisco article
"Avoiding HSRP Instability in a Switching Environment with Various Router
Platforms". It might apply to your situation.
> -Original Message-
> From: Raj [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, January 28, 2003 4:
Hi,
I would really appreciate if you could point to the
upgrade instruction in CCO.
Regards,
Zahid
""J M"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I did this recently. followed this guide.
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62069&t=618
the 6348 has the ability to supply inline power to IP Phones
and AP units..
The 6248 does not have that ability
I am not sure about the 6148.
Larry Letterman
Network Engineer
Cisco Systems
- Original Message -
From: "dayo olabisi"
To:
Sent: Tuesday, January 28, 2003 1:53 PM
Sub
The 6348 is the higher-end model for the network core:
http://www.cisco.com/en/US/customer/products/hw/switches/ps708/products_data_sheet09186a0080092393.html
Dave
dayo olabisi wrote:
> Hello listers,
>
> does anyone know the technical difference between the
> ws-x6148-rj-45 and ws-x6348-rj-
sorry, Ken, I've read so much crap about saphire and 1434 the last couple of
days that I forget who said what. sorry for misrepresenting you as a result
of my frazzled brain.
given the large installation of MS SQL devices on your campus, may we blame
you and your wards for the problem? ;->
Chuc
Well, um, yes. Although I removed us as part of the problem as soon as
I noticed we were. :-)
>>> "The Long and Winding Road"
01/28/03 02:36PM >>>
sorry, Ken, I've read so much crap about saphire and 1434 the last
couple of
days that I forget who said what. sorry for misrepresenting you as a
re
Mark,
Thanks for the kudos. I worked really hard on the book and I know, after
having written 6 books, that you can't please everyone. However, of all of
the books that I've written, I'm proudest of this book. Yes, there are some
errors that slipped in during my last review of the book and when it
If you have the DSL router just add this line
ip nat inside source static
that will allow your VPN clients through your NAT router to the VPN
termination point.
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Michael Vasilenko
Sent: Tuesday, January 28,
""dayo olabisi"" wrote in message ...
> does anyone know the technical difference between the
> ws-x6148-rj-45 and ws-x6348-rj-45 modules for the
> cat6500 switches?
>
> the price difference is very significant though the
> documentation on Cisco's web site doesn't show any
> technical difference.
""dre"" wrote in message ...
> ""dayo olabisi"" wrote in message ...
> > does anyone know the technical difference between the
> > ws-x6148-rj-45 and ws-x6348-rj-45 modules for the
> > cat6500 switches?
> >
> > the price difference is very significant though the
> > documentation on Cisco's web s
""MADMAN"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> The 6348 is the higher-end model for the network core:
>
>
http://www.cisco.com/en/US/customer/products/hw/switches/ps708/products_data
_sheet09186a0080092393.html
I believe the 6348 should only be used in the access layer
I know a lot of people on this group have been published, some multiple
times, and I hope I'm not offending anyone by asking this question: How well
does a book publisher pay for the books you write? I'm not expecting any
specific figures, but a ballpark figure would be interesting.
Thanks!
GM
---
NAT on a stick worked thank you very much for your advise. Now I just
have to talk my wife into letting me keep the router and switch in my
living room, LOL.
Thanks again.
Lupi, Guy wrote:
> You may also want to have a look at this link "NAT on a stick":
>
>
http://www.cisco.com/en/US/tech/tk6
Hi
Check out this link
http://www.cisco.com/warp/public/110/pixfaq.shtml#Q15
fahim
""oscar"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I have a web server with an inside local 192.168.0.5 and with static NAT I
> make an association with the inside global (e.g.) 222.222.222.
Hi
If you want VPN client to connect to your pix, you need to assign a public
IP to your outside interface and you can create a pool of private ip address
to your vpn client by using (ip local pool start ip...end ip)
and give the pool name in the vpngroup configuration (vpngroup
address-pool . Th
the routers send hellp packets using a multicast address - check that this
is not being blocked somewhere.
-Original Message-
From: . [mailto:[EMAIL PROTECTED]]
Sent: 28 January 2003 22:46
To: [EMAIL PROTECTED]
Subject: HSRP PROBLEM [7:62057]
HSRP PROBLEM
x.x.x.36 and x.x.x.37 are two r
72 matches
Mail list logo
