They stink. You can't use it at all. That's WHY those bad sellers put uBRs
on sale... you can't use it at all! I knew it from the very beginning "a
device like that for only $60 bucks? Its retail price is something about
$900,00. Why should someone sell this for 60 dollars?".
My findings:
- M
How close is Boson prep exam closed to the real thing?
-E
-
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62085&t=62085
--
F
wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Dear All,
>
> Need your advice on the following scenario:
>
> I am using VLANs to provide the partitons for the traffic (voice and data)
> from various departments. In order to provide routing between various
> VLANs, I would need a ro
Dear All,
Need your advice on the following scenario:
I am using VLANs to provide the partitons for the traffic (voice and data)
from various departments. In order to provide routing between various
VLANs, I would need a router to do so.
Please advice if there are any difference in the functiona
I think I have reached my 'rule' actually. In a normal situation, I would
want the Internet ASBRs injecting default routes on area 0, as that is where
everything is passing through anyway. This assumes a 'clean' environment
where the only things being routed in the OSPF AS are private addresses.
my money's on content filtering by your upstream.
did this ever work? I wonder if this is a spillover from last weekend's port
1434 (saphire) attacks. could be that some upstream engineer started
filtering everything Microsoft to stop network overload.
""Charles Riley"" wrote in message
[EMAIL
Having written one book and a bunch of web content, I can tell you that
(IMHO) it's great to be able to keep updating and tinkering around with what
you've done. Once something is printed on the page, it can haunt you
forever - electronic documents, on the otherhand, can evolve over time to
become
Hi All,
I am trying to avoid fragmentation of packets across the IPSec+GRE tunnel
with "transform-set" using "ah-sha-hmac" AND "esp-3des" for header
authentication and payload encryption. What size of MTU or "TCP
addjust-MSS" should I use for maximum performance? I tried out couple
values and fo
Do these labs for better understanding...
http://www.cisco.com/en/US/tech/tk648/tk365/technologies_tech_note09186a
0080094e8d.shtml
WATCH THE WORD WRAP!
Deepak N wrote:
>
> Hi all
>
> The following are the configurations of the routers and the
> ping outputs.
> I have given 3 cases.
>
> 1) W
Hi
when i did debug ip icmp, i got the message that its unroutable when one
end is numbered and the other end is unnumbered. This is expected because it
doesnt have the next hop ip address to reach. But i expect the same
behaviour when both are unnumbered. But it is able to send the rip updates
a
with regards to the rsvp command, if there are any mpls routers between 'r2'
& 'r3' the interfaces that take part in the tunnel should be config'd for
rsvp - also, make sure you don't 'over book' the interface
another thing that appears to be missing from you config is the tunnel's
path - the way
HI Claudio
Please find the following for the different cases i mentioned.
Regards
Deepak
1)When ip unnumbered at one end and static routes are defined
sdmheadend#sh ip rou
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSP
To my knowledge, the IOS based switches I have in my
network, the vlan 1
can't be removed from the trunks, in the case of
2924/2950/3524...
Larry Letterman
Network Engineer
Cisco Systems
- Original Message -
From: "Jim Devane"
To:
Sent: Wednesday, January 29, 2003 3:53 PM
Subject: Defa
When you say, "sounds like someone's content filtering upstream", are you
talking about the frame provider?
Geoff Mossburg
-Original Message-
From: Sam Sneed [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 29, 2003 5:50 PM
To: [EMAIL PROTECTED]
Subject: Re: what the h... - strange prob
Consider your OSI layers. :-) A hub problem is very unlikely to cause such
an issue. A generic router wouldn't either. This definitely seems like a
Layer 7 problem.
Someone is filtering on .exe and .zip. They just weren't smart enough to
think about the UNIX and Mac equivalents. This could be an I
So it fails when you have numbered on one side and unnumbered on the other
side and you are running RIP?
What did "show ip route" tell you when the problem occured? Were the
relevant routes in both routers' tables?
What address does sdmheadend use to send the echo? If it's using
172.20.110.10, th
All,
This will probably sound like a horrendous situation but unfortunately
networks are not always master-planned communities!
However, I have a Cisco router connected to a 2924 switch connected to a
Riverstone 8600
There are 2 100FX connections coming from the GSR to the 2924 and 2 10/100
(Cu)
Hi
Give us a look at the routing table from both routers.
The router with the configured ip address on the Serial interface does not
know how to get to the next hop address.
Do you see in the routing table the next-hop address or the outbound
interface?
see you
Message Posted at:
http://www.g
Charles; Give us more detail. I'm taking you to say that dial-up users
connect to a server somewhere on the Internet to download files. Any
particular servers or any server out on the Internet? They are using FTP?
Any difference between active or passive mode? You did not mention any
servers at the
That HUB doesn't know the difference between the various file name
extensions and neither does the router. UNIX comes with tcpdump so there's
no need to load the sniffer. Also run the debug command on the router to see
if the packets are going through it if you don't see them getting to the
UNIX bo
Sorry, should have mentioned. I get the same result whether the user system
is UNIX, Mac, or Windows...it plays havoc with .exe and .zip.
That is a good suggestion, though, about the sniffer...that is about the
only thing I haven't tried yet. The Kmart bluelight special hub is making
me a little
load a packet sniffer on the laptop and see what really happens. If you
don't have one I know of a good free one . You install libpcap first, reboot
and then install analyzer.
http://winpcap.polito.it/install/default.htm
http://analyzer.polito.it/install/default.htm
Then you can see if the packet
Hi all
The following are the configurations of the routers and the ping outputs.
I have given 3 cases.
1) When ip unnumbered at one end and static routes are defined
sdmheadend#sh run
Building configuration...
Current configuration : 1115 bytes
!
version 12.2
service timestamps debug datetim
John,
It's a little dated, but alot of folks like 802.11 Wireless Networks: The
Definitive Guide (O'Reilly Networking) (Matthew S. Gast). I have that book
and it provides some very good detail on A and B, but little on G which just
emerging as the book went to press.
The below is an excellent s
I ran across a strange problem with one of our POPs the other day, and am in
the process of researching/troubleshooting it. We have a configuration
something like this:
"Internet"---2500---AS5300---D/U Users
Not shown is a LAN connected to the 2nd Ethernet on the 2500. All
c
Hi
What kind of routing protocol are you using? Ospf can not build an adjacency
this way.
With other routing protocols you should be able to exchange routing tables.
But you won't be able to send traffic, because the router does not know
where the next-hop address is. So you still need this stat
Which is failing to get to the other side? The ping (echo) or the ping reply
(echo reply). Pinging could fail for either reason. Debug icmp and you might
get more info.
Also, send us your configs. Help us help you.
Priscilla
Deepak N wrote:
>
> Hi Claudio
> Thanks for quick response.
> But i
Hi,
First, you should apply the crypto to the physical an the logical
interfaces.
Second, define only gre traffic for the access-list
Third, try to change the IP MTU size because the fragmentation (1440 or
lower ) or configure the interface command "ip ospf mtu-ignore "
Last of all, multicast
This is a minor detail that a lot of documentation assumes you know
already, which is a bad assumption.
le = less than or equal to,
ge = greater than or equal to.
Read the prefix lists in that manner and they suddenly make a lot more
sense!
HTH,
John
>>> "ericbrouwers" 1/29/03 2:44:47 PM >>>
You know, Richard might want to think about writing a book on how to write
and sell books! Thank you very much to everyone for your answers; I've
always wondered what goes into this, behind the scenes!
Geoff Mossburg
-Original Message-
From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED]]
Hello,
I've a question about BGP prefix-lists. In BGP prefix commands the operators
"le" and "ge" can be used. For instance:
ip prefix-list abc permit 0.0.0.0/0 ge 8 le 24
I suppose that the "e" in "le" and "ge" means "equal to", doesn't it?
I ask this because Cisco's prefix-list documentatio
Hi Claudio
Thanks for quick response.
But i have tried that options. i defined a static ip route to the network
on the other end through the connecting interface.it did work.
But when i am using the routing protocol, i am not able to ping either end.
But if i make the other end also unnumbered,
hi
this is a strange thing.
If the routers are connected via a switch make sure that port security is
disabled because the actice router has 2 MAC Adresses for the HSRP interface.
see you
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62136&t=62064
--
Hi Deepak
When you configure "ip unnnumbered" on an interfaces it looks like an
interface with a /0 mask.
On the other side with a configured ip address on the interface you have a
different mask. So the two connected interfaces don't belong to the same
network.
What you could do is to configure o
HI All
I have simple configuration of HDLC connected back to back.
If i give ip unnumbered at one end and the static ip address at the other
end, I cant ping the either end. But when i give show ip int brief, it shows
the line and protocol are up.
If i give ip unnumbered at both ends, now i am ab
Hi
Yes you have to configure an access-list that allows only this particular
host. Then -> debug ip packets (access-list X)
Make sure you have configured "no logging console" on your router in
advance. This way you don't risk to crash the router so easily.
If you only want to see what traffic
Hello
You should not encrypt the tunnel network itself.
First line of access-list 199 should be: access-list 199 deny ip 120.20.59.0
0.0.0.255 120.20.59.0 0.0.0.255
The router can not build an OSPF adjacency on encrypted traffic.
see you
Claudio
Message Posted at:
http://www.groupstudy.com/f
I think one could say that Richard's books are really a great Deal! Guess
you've heard that one before. :-)
Anyway, we're glad you're writing them. Thanks.
Priscilla
Richard Deal wrote:
>
> GM,
>
> It depends :-). First, you typically get an advance. This
> varies, but can be
> between $5,000
Mossburg, Geoff (MAN-Corporate) wrote:
>
> I know a lot of people on this group have been published, some
> multiple
> times, and I hope I'm not offending anyone by asking this
> question: How well
> does a book publisher pay for the books you write? I'm not
> expecting any
> specific figures, but
I have configured ISDN dialer interfaces to perform call back and everything
seems to work properly when the client initiates the call, including
multilink callback on the second channel. However, when I initiate contact
from the callback server with packet sweep ping, the client will
successfully
Watch the CPU utilization on the Cisco router, though. Turning a router into
a sniffer seems like a really bad idea to me. Plus the output isn't very
detailed and isn't in English. I recommend a real analyzer. Ethereal is free.
Priscilla
Maccubbin, Duncan wrote:
>
> You really don't get an idea
The 2600 and the 3600 are fine.
But you would need the Enterprise Feature Set
>From: "Marcel Janssen" >Reply-To: "Marcel Janssen" >To:
[EMAIL PROTECTED] >Subject: IPSec tunnel [7:62125] >Date: Wed, 29 Jan
2003 19:23:45 GMT > >Hi, > >we are planning to use Cisco routers between
our main >site
On Jun 21, 11:38am, "Kaminski, Shawn G" wrote:
}
} That's why I'm thinking along Pricilla's line of thought; that the
} GigaStacks may change something that allows switches more than one hop away
} to be seen using the "show cdp neighbors" command. I haven't researched it
I'm going to guess t
Hi,
we are planning to use Cisco routers between our main
site and two remote sites with an IPSec tunnel using
3DES encryption and certificates for authentication.
Can someone tell me what Cisco hw platform and IOS sw
I need with 2 IPSec tunnels ending in one router?
router
Hello,I have 2 routers, R2R6 connected via serial netw.
120.20.26.0/24Ospf Area 0 is on R2, netw. 120.20.234.0/27Isis on lo0 on
R2 (2.2.2.2/24) and on the serials between the 2 routersOspf Area 3 on
R6, netws. 120.20.60.0/24 and lo0, 6.6.6.6/24 Created a tunnel on R2 and
R6 to connect area 3 to are
Since the links are not equal costs I would recommend using EIGRP.
""Waters, Kristina"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Guy,
> Yes, the links will be on the same routers (both cisco) on both sides and
> will not be of equal bandwidth. It's kind of a weird set up.
Thanks, Richard.
I think for us the best solution is to route both edge routers through the
pix and use RIP to keep everyone happy. Static routes are a consideration,
but I2 tends to be pretty dynamic and there are a lot of sloppy routes out
there (obviously) so I think that would be a losing bat
I have installed solarwinds prof. However, i was looking out for a graphical
map of my network which seems to be missing.
It has done a network discovery but is displaying the devices in a list
form.
Does anybody know if I could open another program included in solar. prof.
to see a map or it lack
You really don't get an idea of how fantastic Cisco until you work with
other products. We have several Enterasys routers here and they are very
limited in what they can do as compared to IOS. I have used the debug packet
acl command and it really makes life easier.
-Original Message-
From
Look here.
http://www.cisco.com/warp/public/620/roadmap.shtml
-Original Message-
From: Raj [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 29, 2003 11:49 AM
To: [EMAIL PROTECTED]
Subject: IOS version question [7:62108]
on the 1700 routers,
Which is the latest version of these two:
logging on
logging buffered informational
Access-list 101 permit ip 10.10.10.1 0.0.0.0 any log
access-list 101 permit ip any any
Apply that ACL to an interface in the direction traffic will be flowing and
when that host traverses the Router you can do a show log and it should have
created an entr
Hello,
Does anyone know a ios for 2500 that contain support for ttcp.I've already
tried the 12.0 ip plus but is not there.
Regards
Stefan
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62117&t=62117
--
FAQ, list archives, and subs
Hello,I have R1 connected to R4 running Rip ver. 2R4 connected to R3
running Rip ver 1R4 to R2 and R2 to R3 running Ospf 1 R1R4R2
120.20.14.0/26
^
^
|
|
|
|
|
nice, not as nice as tcpdump, but nice ;-)
""Maccubbin, Duncan"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> You are correct. Very nice feature eh?
>
> -Original Message-
> From: Sam Sneed [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, January 29, 2003 12:14 PM
> To: [EM
You are correct. Very nice feature eh?
-Original Message-
From: Sam Sneed [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 29, 2003 12:14 PM
To: [EMAIL PROTECTED]
Subject: Re: debug commands [7:62107]
I see, so if I want to debug for certain tcp protocols can I use extended
access-lis
I have seen times where if you connect the two routers through a switch,
that spanning-tree can disrupt the HSPR Hellos, and cause problems. If you
are connecting these two routers through a switch (or a swicthed
environment), make sure to use spanning-tree portfast on those ports so that
spanning
Right. using debug IP packet is nice because you can use an ACL to narrow
down the protocol and/or host(s) that you want to debug.
Mike W.
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62112&t=62107
--
FAQ, list archives, and su
I see, so if I want to debug for certain tcp protocols can I use extended
access-lists?
""Maccubbin, Duncan"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Just make a permit ACL for that host and the debug will only report on
that
> one host.
>
> -Original Message-
> Fr
Just make a permit ACL for that host and the debug will only report on that
one host.
-Original Message-
From: Sam Sneed [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 29, 2003 11:49 AM
To: [EMAIL PROTECTED]
Subject: debug commands [7:62107]
If I want to see all IP traffic from host
That's why I'm thinking along Pricilla's line of thought; that the
GigaStacks may change something that allows switches more than one hop away
to be seen using the "show cdp neighbors" command. I haven't researched it
further, but plan to contact Cisco regarding this.
Shawn K.
-Original Messa
If I want to see all IP traffic from host 10.10.10.1 on a cisco router, what
would the debug command look like? I looked at the help menu and I think its
debug ip packet but then the options are:
Access list
Access list (expanded range)
Do I have to create an access-list for the hos
on the 1700 routers,
Which is the latest version of these two:
12.2.13 OR 12.2(4)YA2
thank you
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62108&t=62108
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/
sorry i didn't enphasis on a point that from i've written could be
misleading, (the router must rebuild the packet fields and frame fields,
then load balances to the servers.)
the router will actually, nat the ip, forward the packet in which case a
rewrite happens to the frame's mac.
regards,
""Ju
Jamie,
Not quite...what you can do, however, is have all traffic go through one PIX
and have another PIX as a failover. In this scenario, if one PIX would fail,
the other could kick in--in this scenario, only one PIX is active. Of
course, this still presents a problem of an exit path--by default,
I'm navigating the Cisco site as well as whatever google comes up with, but
I'm having a very difficult time finding any decent reference material for
802.11. I work for an ISP and unfortunately, we've been left in a position
of not having anyone left who's well versed in wireless access. We have
s
Guy,
Yes, the links will be on the same routers (both cisco) on both sides and
will not be of equal bandwidth. It's kind of a weird set up. We have
multiple sites in puerto rico that connect to a hub site, the hub then
connects back to corporate. However, the sites in pr are all interconnected
with
Web server farm for ur ebiz site,
u assign private address to the servers, and use only one public ip to
access them all.
""Peter P"" a icrit dans le message de news:
[EMAIL PROTECTED]
> Thanks for that. Is my 'real world' example right in broad conception ?
Message Posted at:
http://www.grou
another option is to use ospf and cef to load balance the links then
configure BGP with loopback interfaces to use the two ospf routes (make them
equal cost). same concept as using two static routes but a little more
flexibility.
Xueyan
Message Posted at:
http://www.groupstudy.com/form/read.php
I have a situation that I hope some of you might shed some light on. We
have 2 points of ingress to our campus. One OC3 (Nycernet) for internet 2
and one (Time Warner) Our commodity edge consists of a 7200 router then
the PIX. The I2 edge is just a 7200 series router. Our problem is that
with
actually FRF.16.1, will not suport ISDN interfaces or any virtual interface
for that matter, also because of the latency introduced when having
different bundle links of differing speeds, it's recommended to use links of
the same speed.
of course the router must be a 2600 and up, with 12.2.(8)T if
Are the links going to be connected to the same routers on both sides? If
so, then you can use static routes and CEF per-packet load sharing, you
would have to place 2 static routes in each router for the IP blocks that
the other router serves, give the command "ip cef" in global configuration
mod
GM,
It depends :-). First, you typically get an advance. This varies, but can be
between $5,000 and $15,000, depending on the subject (how hot it is) and the
previous track record of the author. This money counts against any royalties
that you make...which is why they call it an "advance". You the
Thanks for that. Is my 'real world' example right in broad conception ?
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62096&t=62088
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report mis
Jason, this sounds like exactly what I'm looking for. Thanks!
Kris.
-Original Message-
From: Jason Owens [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 29, 2003 9:07 AM
To: [EMAIL PROTECTED]
Subject: RE: Help the newbie... [7:62087]
One thing you can look at is EIGRP and unequal
hi
it is nothing like HSRP, even if looked @ from the virtual IP point of view,
for the simple reason that HSRP elects one active router and only router is
active @ any time, (as opossed to TCP load Balacing, that uses all the ip's
of the servers to forward data to) and the real ip of the active H
I need a few good CCDA's that are willing to review our new CCDA practice
test. Those CCDA's that are interested in testing this new CCDA test will
receive a free CCNP or CCNA practice test. If interested please send me you
contact information via email.
Message Posted at:
http://www.groupstud
Make it easy.
Call your Frame Relay Provider
Poss alternatives?
Multi-link Frame Relay Allows for multiple T-1 pipes to be bonded.
Look at multi link PPP or otherwise setting new sub interface and dlci from
provider.
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62092&t=62087
Team,
For those of your trying to assign an Ip address to a virtual-tokenR, the
issue is more related to the IOS version, I just did a test in a few routers
and it works on version 12.0(9) on a 2500and in version 12.0(21) on a
2500 as well
Well, I least I could have it available in one of m
One thing you can look at is EIGRP and unequal cost load balancing.
Here is a link that explains what it is:
http://www.cisco.com/en/US/tech/tk648/tk365/technologies_tech_note09186a008009437d.shtml
Waters, Kristina wrote:
>
> Everyone,
>
> I have a site that is currently connected with a 512k
hi friends
i want to know abt the CCSI certification,want to know how to achive
itno informaion in cisco site abt this CCSI certification,,so if anybody
knows abt this kindly send me few words
thanking u
VijayAnand
-
Do you Yahoo!?
Yahoo! Mail Plus - Powerf
Can anyone give me a real world example of why you would need to consider
using TCP Load Distribution. I am summarising slightly but
TCP Load Distribution seems to be a method of using a single IP address (the
Global Inside Address)inbound; which is handed off to different devices on
the inside. OK
Everyone,
I have a site that is currently connected with a 512k frame relay link. We
are adding an additional T1 link to the same location. Is it possible to
aggregate these links in such a way that traffic will be carried across
both? If they are configured this way, will the other link still be
I have the ip rsvp bandwidth 500 500 on the related interfaces. Is that
what you mean?
"Charles" @groupstudy.com em 27/01/2003 21:05:18
Favor responder a "Charles"
Enviado Por: [EMAIL PROTECTED]
Para: [EMAIL PROTECTED]
cc:
Assunto:Re: MPLS Traffic Engineering - 2500 router res
I can only get csim working if the telephones are connected
via an IP Peer.
Testing locally, i.e. two phones connected to different ports
on the same FXS module doesn't give me any successful values.
Here is a local call that was successfully answered, but yet
csim says it wasn't.
Anyone seen
yes,I can assign an ip address on cisco2500,but I can't do it on Cisco2611XM.
I think,Perhaps the SRB use Loopback interface's ip to communication with
other Router,so can't assign an ip address on the router
Un
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=62083&t=6201
85 matches
Mail list logo
