Dear Folks and Gurus,
One of our client LAN are impacted by broadcast / multicast storm causing
very
severe intermittent and frequent time out.
Tools used are Cisco Traffic Director, CiscoWorks and Sniffer to collect
traffic information.
There are several top conversations generated high broadca
Hi Ed
Sure I answered 04-01:
Hi
We implemented with ActivCard's AvtivPack Server.
http://www.activcard.com
We have Novell NDS for User Database. Activcard is best integrated in NDS.
We also had a pilot with SecureID, but Integration in NDS (via LDAP) did not
fit.
Regards
Martin
Message
Hi, this seemed to do the trick, thanks.
Just found it confusing as having gone through the various CCNA literature
it seems to ram home that all you need enter is the 'terminal monitor'
command and then debug what you need.
This works on my home routers IOS 12.0 on Cisco 3000 but not on these 17
actually this is question i have to answer in my assignment. i am also not
able to understand it correctly as its not clear.
we can assume any server. can u help me in this
""Scott Roberts"" wrote in message
news:[EMAIL PROTECTED]
> well georgeW,
>
> your questions seem a little hidden. what are
Can anyone recommend a UK based CCIE training company, i.e. one which
provide mentoring, training material etc? Has anyone got any general views
on this approach to CCIE studies?
Thanks in advance.
Tim
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66825&t=66825
Hi All
My understanding of ping is that it uses icmp
however, a frend of mine told me that in a ping flood test,ping uses udp
because there is no need for acknowledgment
My understanding is icmp falls under the internetwork layer in DOD model and
so when a ping command is executed,instead of us
When I wrote in November pass mark was 58%, 150? and 3 hours!
[EMAIL PROTECTED] wrote:
>
> when i failed in november, it was 150 questions/3 hours/58%
> pass mark
>
> -Original Message-
> From: alaerte Vidali [mailto:[EMAIL PROTECTED]
> Sent: Thursday, April 03, 2003 6:58 AM
> To: [EMA
Interesting discussion,
In-band, out-of-band are very confusing terms when used in digital
telecoms/datacoms. People and books will tell you contradicting things. For
the right definitions you can best refer to ITU or ANSI specs.
I haven't been involved in classical telecoms for years, but this i
Well loads of answers already, but my £0.02-> Routes to null can be used to
blackhole traffic with lower overhead that an ACL, but obviously with less
granuality.
You could also use routes to null for redistribution, I have used this in
the case of EIGRP when I wanted to redistribute static routes
I need a little information about, multicast, if I am using multicast within
a single IP network can I use the cisco 2950 switches, i.e. do I need any
multicast protocolls such as IGMP and the like.
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66831&t=66831
---
Not sure what engine line cards you're running on your GSRs, but I've
run into several a problems with ACLs on the GSR platform. It's not
until you get to the E3 ISE or better LC where ACLs are handled
reasonably.
Three problems from memory:
* E0 line cards run the ACLs off the LC CPU and not A
Yah Eric you mentioned almost all of them rightly, but I would like to
specify the T1 and E1 part a bit
First thing T1 uses some bits of each timeslot (6th,12th,18th and 24th bit
of every timeslot and these bits are also known as A,B,C and D bits) and
since these bits are part of the timeslot onl
By default the error messages and all other stuff is sent to the console.
But if you type in "NO LOGGING CONSOLE" or any other command to send the
logging to the buffer perhaps, you will have no error messages to monitor
from the terminal connection. Check the configuration for config lines of
this
Trying to find explanation about Inconsistent AS I have not had success.
Any Thoughts?
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66835&t=66835
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cis
Once i heard, that a ping from a Cisco Box is not the same like a ping from
a Windows PC.
One is icmp the other is udp.
Can anyone confirm? and, where is udp , where is icmp.
One solution to make it all clear is to take a sniffer - or i could search
my CIT Course stuff this weekend ;-)
Martin
You cannot telnet to the PIX's outside interface normallyBut the only
way you can telnet to the outside interface is if you have a IPSec tunnel
that terminates onto the PIX. Then telnet is allowed.
see link
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/cmdref/tz.h
tm#1025921
hi all
i have this 2511 and tried to reverse telnet to a 2503.
it opens up te port and remains idle.
please help
gimme two or three alternatvies in a go to try them out
please
thanx
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66836&t=66836
--
Thanks a lot. Now it is clear that this subject is unclear.
I was not sure if it was me or this subject is really not
clear.
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66839&t=66607
--
FAQ, list archives, and subscription in
You need a router when running them parrallel.
The router will determine internet traffic goes to the pix, remote
vpn lan's etc go to the vpn 3000.
Mine is like
VPN 3000 PIX
10.0.0.210.0.0.10
10.0.0.0/24
10.0.0.1
RTR
Maybe you could try a big value, for example 10% broadcast suppression and
see the behavior of your network. Them, you could adjust it. Once I used 1%
without problem, but it seems I had less broadcast/multicast than you.
Also, I think you could limit the bandwidth used by specific broadcasts
gen
I read something that scared me on the url
http://www.cisco.com/en/US/products/hw/switches/ps708/products_white_paper09186a00800c8441.shtml
"Should the MSFC fail, all Layer 2/3/4 functionality is lost"
We are currently running Hybrid mode, and more than once the MSFC stop
working (in differents e
Not sure what engine line cards you're running on your GSRs, but I've
run into several a problems with ACLs on the GSR platform. It's not
until you get to the E3 ISE or better LC where ACLs are handled
reasonably.
Three problems from memory:
* E0 line cards run the ACLs off the LC CPU and not A
I just ran a ping on my Linux while doing a tcpdump. It still uses icmp,
both with a flood and without. I ran from a windows box and the same. The
basic windows ping command won't let you flood (the -f is for
fragmentation). I think your friend is wrong. However, he/she might be
confusing pings for
ip local pool fortelnet 172.16.1.21
vpngroup telnetaccess address-pool fortelnet
vpngroup telnetaccess idle-time 1800
vpngroup telnetaccess password whatever
telnet 172.16.1.21 255.255.255.255 outside
The lines above will give you a start. You will also require a Cisco VPN
Client loaded onto your
Yah Eric you mentioned almost all of them rightly, but I would like to
specify the T1 and E1 part a bit
First thing T1 uses some bits of each timeslot (6th,12th,18th and 24th bit
of every timeslot and these bits are also known as A,B,C and D bits) and
since these bits are part of the timeslot onl
I have a 1600 series router that is not booting. I gives me the
Router(boot)> prompt when it boots. Can someone tell me how to get it to
boot properly. Here is the output:
System Bootstrap, Version 12.0(3)T, RELEASE SOFTWARE (fc1)
Copyright (c) 1999 by cisco Systems, Inc.
C1600 platform with 819
Joseph,
In this scenario all you had to do is specify the TUNNEL DEFAULT Gateway on
the Concentrator, Is that right.
Also In site to site VPN case, the remote site can get the DHCP addresses
from the servers if we define helper address on the remote site VPN
router...right ?
Thanks,
neil
""
Hi,
Is there any good book for non-technical manager about intro to networking
(or network 101)?
I have tried to search around and come across two books.
Cisco Networking Academy Program IT Essentials II: Network Operating Systems
Companion Guide
http://www.ciscopress.com/isapi/st~{83B5FF0E-0
Does anyone know if/when Cisco is going to announce a standalone (2950,
3550), triple speed switch? If there is already one out there from Cisco
(standalone) please excuse my ignorance. I haven't been about to track
one down. I know Cisco has a 3550-12T Switch but ony 12 10/100/1000
ports. Word on
>Hi,
>
>Is there any good book for non-technical manager about intro to networking
>(or network 101)?
>
>I have tried to search around and come across two books.
>
>Cisco Networking Academy Program IT Essentials II: Network Operating
Systems
>Companion Guide
>
>http://www.ciscopress.com/isapi/st~{
Many thanks to all who replied. I've got some good verbage now. In
particular the multi-layer defense.
> -Original Message-
> From: Evans, TJ (BearingPoint) [mailto:[EMAIL PROTECTED]
> Sent: Thursday, April 03, 2003 12:36 PM
> To: [EMAIL PROTECTED]
> Subject: RE: hacking challenge [7:6
>Does anyone know if/when Cisco is going to announce a standalone (2950,
>3550), triple speed switch? If there is already one out there from Cisco
>(standalone) please excuse my ignorance. I haven't been about to track
>one down. I know Cisco has a 3550-12T Switch but ony 12 10/100/1000
>ports. Wor
This has always been one of my favorites.
http://www.amazon.com/exec/obidos/ASIN/0130661023/qid=1049475026/sr=2-2/ref=sr_2_2/002-6465627-7277631
(Computer Networks by Andrew Tannenbaum)
Pete
At 03:20 PM 4/4/2003 +, Hubert Pun wrote:
>Hi,
>
>Is there any good book for non-technical manager
alaerte Vidali wrote:
> I read something that scared me on the url
>
http://www.cisco.com/en/US/products/hw/switches/ps708/products_white_paper09186a00800c8441.shtml
>
> "Should the MSFC fail, all Layer 2/3/4 functionality is lost"
>
> We are currently running Hybrid mode, and more than once the
Maybe they will start selling one under the Linksys name (just kidding). So
far the one that you mentioned is the only one available.
Aurelian Georgescu
-Original Message-
From: Greg Rend [mailto:[EMAIL PROTECTED]
Sent: Friday, April 04, 2003 10:42 AM
To: [EMAIL PROTECTED]
Subject: 10/1
Think about it...
With Hybrid mode, the CPUs on the MSFC and the supervisor engine function
independently. You have two user interfaces. With Native mode, the two
devices are integrated with a single user interface and the CPU on the MSFC
functions as the primary CPU for the switch.
Karen
**
Thao,
Call me at 408-394-4893. We are in San Jose.
Tu Do
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66861&t=66633
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Non
I agree also that the best mix to have is definitly Cisco expertise and
Linux/Unix expertise ebcuase they realy go hand in hand in an enterprise
environment. I know yahoo runs their e-mail on sendmail servers so unix and
linux is very widly used. In some cases it's much easier then microsoft too
try these articles
http://www.cisco.com/univercd/cc/td/doc/cisintwk/ito_doc/index.htm
http://www.cisco.com/univercd/cc/td/doc/cisintwk/idg4/index.htm
they should be able to get you going...
> -Original Message-
> From: Hubert Pun [mailto:[EMAIL PROTECTED]
> Sent: Friday, April 04,
Skarphedinsson Arni V. wrote:
>
> I need a little information about, multicast, if I am using
> multicast within a single IP network can I use the cisco 2950
> switches, i.e. do I need any multicast protocolls such as IGMP
> and the like.
IGMP lets a router know that there are devices on one of i
Dear all, on a Cisco 801 router I am entering
#terminal monitor
#debug ppp negotiation
#logging monitor debug
#logging on
RouterA#show log
Syslog logging: enabled (0 messages dropped, 0 messages rate-limit
0 overruns)
Console logging: level debugging, 64712 messages logged
Monitor loggi
hinwoto wrote:
>
> Dear Folks and Gurus,
>
> One of our client LAN are impacted by broadcast / multicast
> storm causing
> very
> severe intermittent and frequent time out.
Are you sure the problem is really related to broadcast/multicast traffic?
With the exception of the Ghost disk imaging so
Hello Group
Hello Calista
I don`t want you to get me wrong, I like Linux, in fact, I have more
test linux boxes in my lab than ms boxes.
For me, Linux`s greatest advantage is that the GUI is not colapsed into
the Kernel and this gives you the option to shutdown the GUI or not
use it at all. Thi
No Read what the tunnel default gateway does... (from the concentrator
page where you set it)
"Enter the IP address of the default gateway or router for tunnels. Enter
0.0.0.0 for no default router."
This is used to have a different gateway for IPSEC tunnels than
for ip routing..
What we are di
Actually, while I'm after some advice :-) another thing that confues me
about these ISDN 801 routers is that I have 2 x B channels up but I don't
have PPP multilink configured.
RouterA#show isdn status
Global ISDN Switchtype = basic-net3
ISDN BRI0 interface
dsl 0, interface ISDN Switchtype
wrote in message
news:[EMAIL PROTECTED]
> Trying to find explanation about Inconsistent AS I have not had success.
Multiple origin AS (MOAS). Basically happens when a single prefix is
announced via two distinct ASes
(origin-AS, not transit-AS - so the last ASN in the BGP path attribute).
You're t
alaerte Vidali wrote:
>
> Maybe you could try a big value, for example 10% broadcast
> suppression and see the behavior of your network. Them, you
> could adjust it. Once I used 1% without problem, but it seems
> I had less broadcast/multicast than you.
>
> Also, I think you could limit the band
We are in the process of openning up an office in the U.K. If you would
like more information, please contact Marc Russell ([EMAIL PROTECTED])
thanks,
-Brad
""Tim Champion"" wrote in message
news:[EMAIL PROTECTED]
> Can anyone recommend a UK based CCIE training company, i.e. one which
> provide
Don't think my last post got through, so I'll shorten it now...
I think your address and wildcard mask should be 10.10.0.200 0.0.255.7 (If
the non-contiguous masks are still accepted).
Regards,
Gaz
""Bill"" wrote in message
news:[EMAIL PROTECTED]
> should work fine.
>
> You can also test thi
suscribe
_
Tired of spam? Get advanced junk mail protection with MSN 8.
http://join.msn.com/?page=features/junkmail
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66876&t=66876
--
Has anyone been able to successfully upgrade his or her systems hardware
from a P3 Xeon Proc and Mobo to a P4 processor and motherboard without
having to reinstall Microsoft 2000?
I'm anticipating the B.S.O.D but I was curious...
The processor, motherboard, memory, and power supply will be replac
Looks like your flash may be empty. There are a couple of ways of loading a
new image to flash from boot image. Normal TFTP is the easiest. Looks like
it may not recognise your WAN interface with the boot image, but your
ethernet should be there and usable for TFTP.
Have a search on CCO. If you sea
>Actually, while I'm after some advice :-) another thing that confues me
>about these ISDN 801 routers is that I have 2 x B channels up but I don't
>have PPP multilink configured.
>
As I recall, HDLC encapsulation automatically uses both B channels.
John
>RouterA#show isdn status
>Global ISDN S
The channels are not necessarily multilinked, try a "sh ppp
multilink" to see if they are bundled.
dave
James Gosnold wrote:
> Actually, while I'm after some advice :-) another thing that confues me
> about these ISDN 801 routers is that I have 2 x B channels up but I don't
> have PPP multili
Yes you should see more. Are you sure you have ppp authenication
enabled? For grins try debug isdn q931 and see if you get anything.
Dave
James Gosnold wrote:
> Dear all, on a Cisco 801 router I am entering
>
> #terminal monitor
> #debug ppp negotiation
> #logging monitor debug
> #logging
You know your GSRs :). Yea I'm running almost all
ISE LCs. For example on a particular one at PAIX that
averages about a half or a Gig during peak on almost
all of my interfaces I have at least some type of acl in both
directions. I only see about 8% cpu useage, hardly any
of which is the ACL (mos
I have been looking for any utilities that does TCP/UDP port scanning.
If you know of any utility that can do the port scanning please let me know.
_
MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*.
http://join.msn.co
nmap is an excellent tool, go to www.insecure.org. Be very careful with it
though, you can cause outages if you don't know how to use it properly, read
the documentation carefully.
-Original Message-
From: johnman johnman [mailto:[EMAIL PROTECTED]
Sent: Friday, April 04, 2003 3:42 PM
To:
> -Original Message-
> From: johnman johnman [mailto:[EMAIL PROTECTED]
> Sent: Friday, April 04, 2003 12:42 PM
> To: [EMAIL PROTECTED]
> Subject: TCP/UDP port scanning Program [7:66881]
>
>
> I have been looking for any utilities that does TCP/UDP port scanning.
> If you know of any utili
Hi All,
Just coming back from the exam room. Passed Support exam, my last one
that was remaining to achieve CCNP.
Now thinking of doing CCDP/CCIE. Not decided quite about which one
next. May be after some time to relax.
Regards
Sudarshan
__
Do yo
Great news! Congratulations.
Priscilla
Sudarshan N Chari wrote:
>
> Hi All,
>
> Just coming back from the exam room. Passed Support exam, my
> last one
> that was remaining to achieve CCNP.
>
> Now thinking of doing CCDP/CCIE. Not decided quite about which
> one
> next. May be after some time
""Greg Rend"" wrote in message ...
> Does anyone know if/when Cisco is going to announce a standalone
> (2950, 3550), triple speed switch? If there is already one out
> there from Cisco (standalone) please excuse my ignorance. I haven't
> been about to track one down. I know Cisco has a 3550-12T S
James Gosnold wrote:
>
> Hi, this seemed to do the trick, thanks.
What worked? You got lots of suggestions.
If you press the Quote button first, then your message will include the
message that you are responding to, so we can see it.
I'm frustrated every time I try to look at debug messages whe
Always glad to see genuin professionals in the same boat. You folks truely
raise the standard in the networking industry.
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=66890&t=9
--
FAQ, list archives, and subscription info: ht
Relax but don't relax too much. Start studying for the CCIE as soon as
possible to get your feet wet
That's the mistake I made. I waited a year later. now I forgot about half of
the stuff.
Just my suggestion.
ccie-n-training
-rbx10
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i
Are you looking for windows based or unix based or both? A
program to start with is nmap - works with windows and unix. There
are others such as portscan, satan and so forth that are usable as
well.
Ian
www.ccie4u.com
On 4 Apr 2003 at 20:41, johnman johnman wrote:
> I have been looking f
Hybrid version use two typee of software CAT OS and IOS
Cat OS is used on the supervisory Engine (Where you define your vlan, set
domain name, and port setting) while IOS is used on the MSFC. MSFC is the
card that perform the routing.
The native mode used only IOS making the switch look like a ro
the copy of this in my sent items has the link I sent but its not in what
was recieved in the group. does majordomo scrub links?
http://www.webattack.com/get/superscan.shtml
> -Original Message-
> From: Wilmes, Rusty
> Sent: Friday, April 04, 2003 2:22 PM
> To: [EMAIL PROTECTED]
>
Diego,
You didn't offend me, and I appreciate your professional response.
On reflection, I might have been a bit harsh. My apologises.
I agree with Jason, they do go hand in hand and I think anyone who has their
fingers in both pies has to be better off.
One other thing I have observed with cert
Yes, it looks like the non-contigious access-list does indeed work. I've
implemented it
today on a production network with VoIP telephones and haven't (at least
yet) received
any reports of poor voice quality..
The actual access-list used:
access-list 101 permit ip any 10.10.0.200 0.0.7.7 precede
we have had the 16 port 10/100/1000 blade for a while in the cat 6000 line.
As DRE says, the 48 port version will be out soon..however it will require
a costly upgrade to the chassis...
Larry Letterman
Network Engineer
Cisco Systems
> -Original Message-
> From: [EMAIL PROTECTED]
I use the super scan program, but I don't believe it will do
udp ports...
Larry Letterman
Network Engineer
Cisco Systems
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of
> johnman johnman
> Sent: Friday, April 04, 2003 12:42 PM
> To: [EMAIL PROT
Most mail list servers are set to disallow attachments...
Larry Letterman
Network Engineer
Cisco Systems
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of
> Wilmes, Rusty
> Sent: Friday, April 04, 2003 3:58 PM
> To: [EMAIL PROTECTED]
> Subject: RE
>Once i heard, that a ping from a Cisco Box is not the same like a ping from
>a Windows PC.
>One is icmp the other is udp.
>Can anyone confirm? and, where is udp , where is icmp.
>One solution to make it all clear is to take a sniffer - or i could search
>my CIT Course stuff this weekend ;-)
>Ma
The GroupStudy software (I don't think it's majordomo) removes links if they
are near the top of the post. I think it is just be a bug. It's not
intentional anyway. So most of us just put in a bunch of filler first.
By the way, it didn't remove the link on the posting on the Web. I could see
it. S
There is an option to limit the data throughput in MB/min after the image is
loaded for transmission in Ghost 7.5. I've seen this issue after/while
moving from Novell to MS. Never saw it while we were a Netware shop even if
IP was the preferred protocol. HTH
Michael
- Original Message -
Hello
Calista, there is no problem! And I agree with you on that Cisco experieced
professionals have a clear view (for example, a true expertise on TCP/IP
which is used by all important NOS) that will help them understand from any
point of view any Operating System.
For example, the Cisco newbie
Ping and traceroute are two very useful functions for managing
networks. Ping is typically used to determine if a path exists
between two hosts while traceroute shows an actual path. Ping is
usually implemented using the Internet Control Message Protocol
(ICMP) "ECHO" facility. It is
Hi all,
The scenario is this : A router with one of the interface running OSPF
and other interface running IGRP.
When redistributing, assuming OSPF carries networks for elsewhere a
combination of /24, /26 and /28 networks. When we want to redistribute
/26 and /28 networks to IGRP with a conditi
79 matches
Mail list logo
