RE: Cisco 2950-24 [7:31215]

2002-01-07 Thread Asbjorn Hojmark
does anyone have any experience with the Cisco 2950-24 port switch? Yep. The 2950's are cheap, OEM'd hardware running Cisco IOS (modelled on the C6K Native IOS software). A few things (such as ISL) can't be done because the ASICs are OEM'd. They're cheap, but I think that's all the nice

RE: SNMP process [7:28134]

2001-12-04 Thread Asbjorn Hojmark
on our core router, every once in a while we will drop some telnet connections. When this happens I look at show proc cpu and see that overall util is 89% in which 69% of that traffic is snmp. Obviously this is not good. An obvious suggestion would be to stop asking the router so many

RE: CLNS and ISIS in RS Lab??? [7:21602]

2001-10-01 Thread Asbjorn Hojmark
By considering the fact that CLNS is no more a part of RS Lab sylabus, how far they can go to ask about ISIS?? I attended the CCIE Power Session at Networkers 2001 here in Copenhagen this Saturday, and they said something along the lines of: Know how to configure basic ISIS for IP. It will be

RE: Cisco support for VRRP any platform ?

2001-03-22 Thread Asbjorn Hojmark
Does anyone know if any IOS version supports VRRP on any of the standard platforms? Not yet. We are working on a VRRP implementation though. I think you meant to write 'Not yet on the routers'. I'm sure some of the boxes you've bought recently (such as the CSS / ArrowPoint switches) does

RE: urgent PIX help AGAIN

2000-10-03 Thread Asbjorn Hojmark
One more question: when I configure PIX as DHCP server, it only allows 10 addresses in the pool. Is 10 max? Yes, 10 is max. It's in the command reference. The PIX wasn't meant to be a large-scale DHCP server. It's a firewall and if you need extensive DHCP server capabilities, you should run

RE: urgent PIX help

2000-10-02 Thread Asbjorn Hojmark
I have only 1 ip address assigned by my ISP, how can I use PIX to do NAT? Looks like PIX requires at least 2 outside ip addresses, one for outside interface, one for PAT. Is there a way to use only 1 ip address? PIX software 5.2(1) allows you to do this, sort of like the IOS 'overload'

RE: CA in IPSec

2000-09-22 Thread Asbjorn Hojmark
One other thing to note, we are still unsuccessfull in getting certs from Microsoft to the PIX. According to CCO it will only work with entrust and Verisign. http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_v52/pixrn5 21.htm#xtocid1335820 HTH, -A -- Heroes: Vint Cerf Bob Kahn,

RE: CA in IPSec

2000-09-21 Thread Asbjorn Hojmark
We will secure by having the root CA off-line and walking the ROOT Cert to the RA. Also, the CA cert will remain pending until the security admin issues it to the router. You should note that IOS currently doesn't currently support cert chaining (subordinate CAs). I learned this the hard way.

L2TF on IPSec CA, from W2K to IOS

2000-06-28 Thread Asbjorn Hojmark
Has anyone successfully made Windows 2000 clients connect to IOS routers with L2TP on IPSec with a CA? We're trying to make this work to a couple of 7100s without much luck. The W2K clients connect just fine to a W2K server and two routers also connect fine to each other, but the Windows

RE: Links and Information to Virtual Labs...

2000-05-11 Thread Asbjorn Hojmark
I'm looking to compile and collect a lists of links of Virtual labs such as Virtual Rack and CCIEbootcamp. Try http://www.hojmark.org/networking/general.html#stu (No, I haven't used any of them). HTH, -A -- Heroes: Vint Cerf Bob Kahn, Leonard Kleinrock, Robert Metcalfe Links :