Re: Pix Performance Issues

2001-04-03 Thread Adrian Chew
""Kevin O'Gilvie"" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > I only have 32 megs on the 515r, the upgrade adds 32 m and a licence which > makes it 515UR for 6k. I was thinking that it was pptp, but since I am using > local authentication, users authentic

Re: Looking for 2520 Router - 2901 Switch

2001-02-20 Thread Adrian Chew
I've seen 2926s that sell for under $2k on Ebay - the 2901 is about as ugly a switch as you can find (yeah it does the job, but for $200 or so differences, just ain't worth it). Also seen 5002s that go for under $2k on Ebay. Patience is the key though. Don't get why everyone looks for a 2520.

Re: 2901

2001-02-20 Thread Adrian Chew
Believe the original poster was actually looking for multi-layer switching (MLS)... the 2901 lacks this capability. You'll need a 2926G (note the G!), or a Catalyst 5000 with Sup3/NFFC/NFFCII, Sup IIG, Sup IIIG... or a 6000 with Sup+PFC. ""Raj Singh"" <[EMAIL PROTECTED]> wrote in message 96rdj

Re: Cat 4000 Switch

2000-11-29 Thread Adrian Chew
You might need a newer version of the software - look for those with CV/CiscoView. You also need the Java client on your PC as you do with the 2900/3500XL series switches for HTTP based management. If you can't find info in the docs, look at the latest product software version release notes. Tha

Re: Switch preference (network topology) question

2000-11-28 Thread Adrian Chew
Jeff, Take a look at the 2948G-L3 and 4908G-L3 switches - both should be lower cost options that should easily keep up with your demands. Unless you have a need for AppleTalk, both of these switches would be better than attempting to go the 5000 route - more costly, less ports gained, etc. Some

Re: Cisco 1605 - enough for CCNP?

2000-11-25 Thread Adrian Chew
I did the buy route - but here's some fruit for thought - you can get lots of lab time for equipment costs, but you don't get any refunds for labs, equipment can be resold. Having your own equipment is nice, but when there's a clock ticking (ie you're being billed) you're likely more motivated/co

Catalyst 6509/MSM meets Loveletter

2000-11-20 Thread Adrian Chew
Anyone seen what Loveletter can do to a network? Had a meltdown today - a couple of infected PCs were trying to scan network drives on Netware servers... at some points the MSM saw 14Gbps in/out of traffic, in (even with a maxed port channel config which we had its rated at 8Gbps in full-duplex!

Re: ECP1

2000-11-20 Thread Adrian Chew
If all you want is the papers, you're better off getting ccbootcamp labs and the Caslow book. The content of the ECP1 class is gained by attending the class itself - I know, judging by your email, that's a LONG ways away. Having been to it and paid for it out of my own pockets - its highly recomm

Re: Appletalk over frame-relay

2000-11-17 Thread Adrian Chew
Glad to help... see below for config examples... <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > I am trying to configure 5 Cisco router's with appletalk, can someone out > their send me a complete config list? Sure... hostname R1 <- change for your ho

Re: HEATED RESPONSE - WAS RE: Lab exam

2000-11-17 Thread Adrian Chew
Gee... must have been a really bad day huh? Can't say I disagree with what's been said though - there's a pretty big pipeline of people waiting for lab exam openings and from rumors heard of people getting throw out halfway through day one - there's more than enough attempts made without any hop

Re: Reverse Telnet to 2901

2000-11-01 Thread Adrian Chew
Brian, You have to be persistent and work really hard with "sh line". Look at the DTR, DCD, etc and check out the troubleshooting guide for modems/async ports on CCO. Check out the pinouts on connectors - there are non-standard pinouts on some of the old equipment - enough for some stuff to wor

Re: Bruce Caslow

2000-10-26 Thread Adrian Chew
Just checked MentorTech's website - its gone up to $3995.00! ""Frank Wells"" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > It is approximately $3600.00 > > > >From: Brian <[EMAIL PROTECTED]> > >Reply-To: Brian <[EMAIL PROTECTED]> > >To: Michael Le <[EMAIL PRO

Re: CCDP help for CCIE?

2000-10-24 Thread Adrian Chew
Brian, CCDA doesn't really relate much, but the CID test does help in preparation for the CCIE R/S _WRITTEN_ exam. Passing CCNP/CCDP and the CCIE written could mean you're like 33% ready for the CCIE lab. Regards, Adrian ""Brian Lodwick"" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]"

Re: Lightstream 100

2000-10-13 Thread Adrian Chew
The LS100 will be able to do the ATM basics such as CLIP (ATM Classical IP) and LANE (ATM LAN Emulation). The LS1010 will enable you to do newer features such as MPOA, CES, ATM QOS, etc. Current Cisco CCIE website still states actual configuration of the ATM switch is not required for the R/S ex

Re: BGP, Multihoming, and Me

2000-10-13 Thread Adrian Chew
John, There might be ways to get this done other than BGP... http://www.cisco.com/warp/public/cc/pd/iosw/ioft/ionetn/tech/emios_wp.htm Take a look at the multi-homing with NAT. I do see some possible problems - with DNS and how your hosts are resolved. You could have a server hosted elsewhere

Re: CCIE Lab Exam Availability?

2000-10-12 Thread Adrian Chew
Side question - I was under the impression that CCIE retakes won't require you to start at the beginning of the queue of new/1st time exam candidates. Anyone knows for sure if there is a seperate queue for CCIE lab exam retakes and the length of time in this queue (the only info on CCO says 30 da

Re: BGP Route Decision Process (hmmm)

2000-10-12 Thread Adrian Chew
Shouldn't the BGP session itself never have been formed - with a duplicate Router ID error being the cause. Error code 2 (OPEN error) subcode 3 (bad BGP identifier) would be the notification message sent. I can't confirm this, but it would seem to be the most logical protocol design choice. For

Re: path exists in BGP table, but no route in IP Routing table

2000-10-06 Thread Adrian Chew
Umm - sorry, it should be... "show ip bgp w.x.y.z" will indicate the next hop is (inaccessible). Regards, Adrian ""Adrian Chew"" <[EMAIL PROTECTED]> wrote in message 8rjji6$e79$[EMAIL PROTECTED]">news:8rjji6$e79$[EMAIL PROTECTED]... > Best gues

Re: path exists in BGP table, but no route in IP Routing table

2000-10-06 Thread Adrian Chew
Best guess given info given:- R4 does not have an IP route to the BGP advertised NEXT-HOP address for R1. If you do a "show ip bgp" on R4, the R1 route should show up as invalid. ""Sean Wu"" <[EMAIL PROTECTED]> wrote in message 8rgfm3$ce4$[EMAIL PROTECTED]">news:8rgfm3$ce4$[EMAIL PROTECTED]... >

Re: Arcane BGP question

2000-10-04 Thread Adrian Chew
Tom, Not an expert by any means, but I believe here's how you explain it:- Well known mandatory - is attributes that is ALWAYS present (eg. ORIGIN, AS-PATH, NEXT-HOP) Well known discretionary - is attributes that are optionally added/configured (eg. Local Preference) There is no bit that specif

2900/3500XL Cluster Config STP

2000-09-15 Thread Adrian Chew
Curious question - anyone knows if a clustered stack of 2900/3500s will appear as a single STP bridge to other switches or each cluster switch appears as a seperate bridge? I'm guessing each switch is treated as a seperate bridge entity for the purposes of STP. The cause of concern would be if o

Re: Network speeds ...

2000-09-15 Thread Adrian Chew
Let's see the math... Access port speed - 100 Mbps/FDX Number of ports per 2924 - 24 (23 access, 1 uplink) Uplink port speed - 100 Mbps/FDX Oversubscription ratio - 23:1 Assuming you have well behaved clients and network has been properly segmented (1,500 clients in a single broadcast domain DOE

Re: Does it have to be 255?

2000-09-05 Thread Adrian Chew
Stop thinkking subnets, start thinking in CIDR terms. It should theoretically be possible to aggregate with up to a /0 (0.0.0.0/0 - everything!). However, if we look at usable address space, besides /0, some of the smallest prefixes are not practical:- 0.0.0.0/1 = 0.0.0.0 - 127.255.255.255 (inc

Re: CCIE Preparation

2000-08-29 Thread Adrian Chew
I would suggest it more as a supplemental book for the CCIE lab - for examples of configs, etc. Did skim through it for BGP examples, but that was cause I kept putting off getting the Halabi book waiting for the 2nd Ed to be released. What you should read are the bibles:- Routing TCP/IP Interne

LS100, Fore ATM NIC, W2K, C5K

2000-08-28 Thread Adrian Chew
Anyone tried getting an ATM NIC on Windows 2000 to work with an Lightstream 100 and Catalyst 5000 LANE blade? I suspect Microsoft's lack of backward compatibility in their Windows 2000 ATM implementation is preventing this setup from working. I'm using a Marconi Forerunner LE 155 adapter. >From

Re: BGP Multi-Homing

2000-08-28 Thread Adrian Chew
Adding on to the question... 1) If a /24 is not acceptable, does the acceptable range start at /21 or /23 or? Here is what I believe is doable - but you need your providers to co-operate along:- 1) Get a /? from your provider, ensure they allow you to advertise a more specific route for the por

Re: Good question involving EIGRP & ISDN

2000-08-28 Thread Adrian Chew
Your traffic continues to use the BRI because of the IP fast-switching cache that is enabled by default in IOS. On your BRI interfaces, do this: int bri x/x no ip route-cache You can also use the "backup interface" command on the serial interfaces instead of floating static routes as you have

Re: Have 4 IP's, two feeds, one hub, what next?

2000-08-27 Thread Adrian Chew
Try this scenario... Use each feed to simulate a small business site - with NAT for multiple IP hosts behind the feed. Get another NT server up... put one per site. Get the two sites connected via IPSEC/VPN. Do this for practice:- 1) IPSEC/VPN without tunnel interfaces 2) IPSEC/VPN with tunn

Re: Exam 350-001, I'm so pissed!

2000-08-26 Thread Adrian Chew
The more I learn, the more I realize how little I actually know. Those people who've approached certification in the past using exam cram and Transcender and other exam preparation tools to pass aren't going to learn nearly as much as those who slog through the topics and understand the concepts.

Re: Help -- How to load balance in OSPF environment?

2000-08-22 Thread Adrian Chew
You must manually configure the OSPF interface cost such as:- int s0 ip ospf cost 1000 int s1 ip ospf cost 1000 OSPF only does load-balancing on equal-cost interfaces. The other method is to do this via configuring the interface bandwidth but this can affect anything else that uses the inter

CCIE Lab - Definitive Books

2000-08-20 Thread Adrian Chew
I'm trying to narrow down the number of books/material from the choices available - specifically for CCIE lab preparation. Here's what I've compiled so far:- Cisco Certification - Caslow Internet Routing Architectures (I'm waiting for that 2nd ed. book!!! when???) - Halabi Routing TCP/IP, 2nd Ed

Re: urgent 6509 msfc down.

2000-08-18 Thread Adrian Chew
Copy the IOS image onto a PCMCIA flash card on the Sup and boot from that or copy that over to the MSFC bootflash... http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/sw_5_4/msfc/star tup.htm ""Amit Lilani"" <[EMAIL PROTECTED]> wrote in message 8njsca$c8q$[EMAIL PROTECTED]">news:8njsca

Re: 2948G-L3 troubles

2000-08-14 Thread Adrian Chew
Lorenzo, Try this... bridge irb int bvi 172 ip addr 192.168.172.1 255.255.255.0 ip helper ... ip helper ... int bvi 173 ip addr 192.168.173.1 255.255.255.0 ip helper ... ip helper ... int g49 no ip addr i

Re: Another Oldie: Frame/Relay with 2 Switches in the middle VERY LONG POST!

2000-08-04 Thread Adrian Chew
Chuck, Here's what I found on Cisco's website with your problem with IP/Frame Relay... Serial interfaces using HDLC, PPP, LAPB, and Frame Relay encapsulations, as well as SLIP and tunnel interfaces, can be unnumbered. Serial interfaces using Frame Relay encapsulation can also be unnumbered, but

Re: Another Oldie: Frame/Relay with 2 Switches in the middle VERY LONG POST!

2000-08-02 Thread Adrian Chew
Chuck, I can't be sure of the actual answer, but I would try the following:- 1) Don't use IP unnumbered, configure IP addresses on the Serial interfaces 2) Try frame-relay map commands (to eliminate any Inverse ARP issues) 3) You might want to troubleshoot EIGRP and see if you need the 'neigbor'

Re: Effects on convergence...

2000-07-31 Thread Adrian Chew
Karen, Did some searching and found this... http://www.cisco.com/warp/public/473/12.html It looks like the rules are simple for switched ports to desktops:- 1) Enable portfast 2) Disable trunking (DTP) 3) Disable port-channelling (PAgP) You might want to check out PortFast BPDU Guard - it loo

Re: Which older Access Router?

2000-07-31 Thread Adrian Chew
Jon, Try the CS-508 (8-port) or CS-516 (16-port). I think there's an even older something (ASM?) too. You should be able to get the CS-508/516 for $200-300 on Ebay... a lot cheaper than a 2509. Problem is its not flash upgradable and the software is pretty old (think 10.x is the last availabl

Re: Cisco specializations - Which?

2000-07-31 Thread Adrian Chew
Chuck, I'd say go for the VPN/PIX... and the LocalDirector too. You might want to check out the Cisco/ArrowPoint products, VPN 3000, 7100 series too. Aironet shouldn't give most people much trouble... though I haven't touched these. Have used both the Lucent's Orinoco and Jaguar's Waveaccess

Re: Route-Map To Loopback Interface

2000-07-28 Thread Adrian Chew
nected interfaces) is set for next-hop IP address of 192.168.255.2 (the router's loopback IP address is 192.168.255.1 with a /24 mask). Regards, Adrian "Brian" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > On Fri, 28 Jul 2000, Adr

Route-Map To Loopback Interface

2000-07-27 Thread Adrian Chew
I've seen this in some configurations where traffic is sent via a route-map to an IP address that is on the same subnet as a router's loopback interface. Eg. interface ethernet 0 ip address 192.168.1.1 255.255.255.0 ip policy route-map abc interface loopback 0 ip address 192.168.255.1 255.255