hey all
i'm new to this list, but already seeing the benefits of being a part of
it. i look forward to these high-level discussions...
after much research, i have weighed the possible options of how to go
about preparing for my CCIE lab. it appears that if i put together even
a makeshift lab
hello
after much research, i can't figure out a way to get cheap voice/ATM
combo routers to cut my costs. does anyone have any suggestions as to
how i can get ATM AND VoIP in my home lab. i want to purchase
everything myself, but at the same time, i want to do so in a way that i
can save money
0:50 PM
To: [EMAIL PROTECTED]
Subject: Re: ATM and Voice [7:39849]
unless you've already been through the lab, how do you know just how
accurate your emulation is? ;->
to paraphrase someone smarter than me, good, cheap, accurate lab
emulation - you can only have two. :->
""E
Does anyone know of a cheaper solution that works like Cisco's GSS? I
need a device that will monitor an actual website and redirect traffic
to another geographically located website in the event of the primary
website's failure.
Thanks,
Ed
Message Posted at:
http://www.groupstudy.com/form/r
does someone know what the equivalent of "clear counters" is on the PIX?
i don't know why, but i can't find a thing...
thanks,
ed
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=63892&t=63892
--
FAQ, list archives, and subscript
I currently have the Cisco ACS and would like to implement a VPN 3000
series solution with a token server. If you have done or researched
2-factor authentication, which Token server product works best with
Cisco's ACS?
If possible, please respond directly to me.
Thanks,
Ed
Message Posted at
Sent this email out a while back but didn't get any response. Wasn't
sure if it didn't get through...Please help if you can...
I currently have the Cisco ACS and would like to implement a VPN 3000
series solution with a token server. If you have done or researched
2-factor authentication, which
hey all
i was trying to upgrade my flash on my Cat5/SupIII to the latest
version, when I decided to delete the old flash first...well, ater
rebooting--DUH--the Cat booted into rommon mode...i didn't have an image
on file, and i couldn't do an xmodem via rommon mode, because the CCO
site says i ha
my 2511 was working fine a few days ago with--i believe--11.0xx
software. i created a configuration and saved it. yesterday, i
upgraded the RAM so that i could load 12.2xx.
the router won't fully boot up, and it never goes into the config or
into rommon. i don't get it. again, it was working
i wasn't too confusing on that explanation...
thanks for all the help, everyone. i'm going to try another image, and
i'll post my results...
ed
-Original Message-
From: Circusnuts_1999 [mailto:[EMAIL PROTECTED]]
Sent: Sunday, April 14, 2002 2:34 PM
To: 'Edward Sohn
If I've missed the boat, please offer more info. For better or worse, I
have probably upgraded no less than a 100 2500s and 3000s (Y2K) in the
few short years I have been working on Cisco.
All the best !!!
Phil
-Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED
Has anyone ever seen an L1010, while booting up, always try to boot from
a flash card? Specifically, slot0? How does one set it so that the
image is always searched for in the internal SIMM instead of looking at
slot0 first? If you've seen this before (on any item, for that matter),
please let
Original Message-
From: Daniel Cotts [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, April 16, 2002 4:17 PM
To: 'Edward Sohn'; [EMAIL PROTECTED]
Subject: RE: Lightstream Boot Order [7:41639]
And a 'show boot' or a "sh run" gives you what? Any boot system ... type
command
does anyone know what this part is called? i'm talking about the
adapter that connects a DB-9 token ring port (on a 2515) to an RJ-45?
thanks in advance...
eddie
_
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com
www.anthonypanda.com. anthony has all the memory you'll need, as well
as some hard-to-find cables...all at incredible prices...
i've dealt with this guy, and he's great...to make this "perfect" for
you, he's *in* hong kong...
hope it helps...
eddie
-Original Message-
From: [EMAIL PROT
www.anthonypanda.com. anthony has all the memory you'll need, as well
as some hard-to-find cables...all at incredible prices...
i've dealt with this guy, and he's great...to make this "perfect" for
you, he's *in* hong kong...
hope it helps...
eddie
-Original Message-
From: [EMAIL PROT
hey all
i've got a question, that seems logical enough, but I can't find any
explanation/answer for it anywhere on CCO or Cisco Press...
Anyway, if I'm creating a VTP domain with multiple switches and VLANs
and stuff, what do I set the IP addresses to for the switches,
themselves? I mean, they
Hello, all...
I have a PIX501 set up for PAT on one ip address through my cable modem.
I have a client on my internal network that needs to connect to a
corporate extranet via IPSEC, using it's own client software (Nortel).
In other words, there is no network-to-network or cisco-to-cisco IPSEC
c
Please disregard...figured it out RIGHT after i sent out the email...
see ya,
Ed
-Original Message-
From: Edward Sohn [mailto:[EMAIL PROTECTED]]
Sent: Monday, June 03, 2002 1:51 PM
To: '[EMAIL PROTECTED]'
Subject: C1912-EN CLI command for...
Does anyone know what the CLI
Does anyone know what the CLI command on the C1912-EN switch is for
changing the management VLAN to something other than 1? I know you can
do it in the menus, but I can't seem to find that CLI command. Is there
even a command to do this?
Please let me know.
Thanks,
Eddie
Message Posted a
Hey all,
I've been having problems setting up my access server (2511) to accept
incoming PPP sessions via an external modem, and I finally figured out
it is a cabling problem.
Therefore, I need the model and availability of a cable that connects my
Hayes Accura modem (female DB-9) to a cisco
Try a 'clear ip nat translations'
i've had this same issue. it's just using the most recent translations.
you probably created your pat pool before before the static nat pool...
ed
-Original Message-
From: [EMAIL PROTECTED] [mailto:nobody@;groupstudy.com] On Behalf Of
Karl West
Sent: Fr
I'm working on Solie's "skynet" lab...
If one router (R2) redistributes summarized EIGRP routes (from R5) into
OSPF (R1,R2,R3,R4), and then OSPF is redistributed into IGRP (R6), how
do I make the IGRP domain see the EIGRP routes?
In the /24 mask OSPF domain, the redistributed EIGRP routes show up
Would someone mind explaining to me how addressing works on the outside
interface of a PIX in a site-to-site VPN configuration with edge routers
connected to the internet?
PIX1(outside)(e0)R1(e1)INTERNET--(e1)R2(e0)(outside)
PIX2
If I'm provided a /29 address by my ISP for PIX
okay, i should have explained better...sorry
let's break my point down to a digestable limit...
at this point i want to know how to set up the site-to-site VPN tunnel
between the two PIX's, if i use private addressing on the outside
interfaces of the PIX's.
if both of the outside interfaces of
t is confusing me is your ip
addressing problem do you have one? A /29 is a 255.255.255.248 subnet
mask which will give you 6 usable addresses. So I am not sure I see a
problem unless you want to use private on the outside then yes you have
a problem.
-Original Message-
From: Edward Sohn
>
excellent...now we're getting somewhere. that's what i thought...but if
this is the case, then how does the PIX establish the actual peering
with the other PIX?
again, my "crypto map peer _address_" example...what IP address do you
use here if using private addresses? and if it's simply the
e"/DMZ
side of the PIXen were configured with RFC1918 addresses. Site to Site
VPN's were established using the Public IP addresses on the "Outside"
interface of each PIX.
HTH's
Mark
-Original Message-
From: Edward Sohn [mailto:[EMAIL PROTECTED]]
Sent: Monday,
gotta put static or nat translation statements for ANY traffic.
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
ramesh c
Sent: Friday, November 22, 2002 1:48 AM
To: [EMAIL PROTECTED]
Subject: Pix question [7:57869]
Configuration
nameif ethernet0 outsid
nope, it won't work...ipsec needs it's own IP address and not PAT. i've
tested this extensively, and it won't work...if anyone else can comment,
please do.
either way, best thing to do is get a few statics from your ISP and
statically translate...
ed
-Original Message-
From: [EMAIL PROT
anyone know if there is a way to "tunnel" single,
remote users over an IPX network?
i have a manager who moves to different remote sites,
but doesn't want to change his IPX network address.
is there a VPN (GRE) client or something of the sort
that will allow for this? i'm not familiar enough
wit
i'm looking for ways to convince my customer to
migrate to an all-cisco environment, which would
entail swapping out all the procurve switches
installed on the LAN edge. The rest of the network is
almost exclusively Cisco (routers and firewalls).
obviously, i know i could utilize the existing hp'
I have a requirement in which a single Headquarters PIX needs to VPN
over the internet to a single remote site which have two separate PIXes
(connected the same site LAN). The goal is to introduce redundancy into
the VPN connection to the remote site. Unfortunately, it has to be like
this due to
ld be curious as to how your going to handle
> the internal routing back
> to the corporate site?
> I think that would be a stumbling block from what I
> can tell.
>
>
> Thanks
>
> Larry
>
>
> -Original Message-
> From: Edward Sohn [mailto:
Thanks to all for the responses to my VPN connections.
I have pretty much verified it will work in an
"active/failover" setting...
Now, I have an issue where I need to convince my
customer that it's better to subinterface a fast
ethernet port into two separate VLANs rather than add
secondary IP a
I've created a webpage so that you can get a better idea of my
requirements.
http://www.geocities.com/checkoutmydiagram
I am having trouble configuring it so that IP traffic gets separated
from IPX/EIGRP traffic. It seems that things must either go through the
GRE tunnel or through the IPSEC t
ted,
thanks for all your hard work. i appreciate it. i know it was a
complicated config, and you tackled it nicely.
in fact, i found out today that what i wanted to do was kind of
impossible, and that was to separate IP traffic from both IPX *and*
EIGRP traffic (both of which cannot flow direct
anyone have any working configs of a PIX set up for a site-to-site IPSec
tunnel with another PIX (at a remote site), as well as set up for mobile
user VPN access (through dialup/dsl/cable/etc)? the client will user
secure VPN client 3.0 for windows.
i have the docs from CCO, but someone told me t
dude,
you have to enable fixup protocols to use whatever ports MSN uses.
also, i've never gotten netmeeting to work right through the pix with
nat. you need a complete static just for the machine you're using.
again, look it up on CCO. it's all there...h.323, etc.
ed
-Original Message
[mailto:[EMAIL PROTECTED]]
Sent: Monday, December 09, 2002 1:26 PM
To: 'Edward Sohn'; [EMAIL PROTECTED]
Subject: RE: more VPN fun... [7:58818]
Share the knowledge I say...
OK, this has been edited to protect my information, but other than that
its directly off of a PIX that has 2 lan 2 Lan tu
L PROTECTED]]
Sent: Monday, December 09, 2002 1:22 PM
To: Edward Sohn; [EMAIL PROTECTED]
Subject: RE: more VPN fun... [7:58818]
Just make sure that you use Group 2 in the isakmp policy, and the users
will connect.
Here is a great reference:
http://www.cisco.com/warp/customer/110/pixpixvpn.html
And
oops. i meant i've never gotten it to work with PAT (not NAT)...
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Edward Sohn
Sent: Monday, December 09, 2002 1:24 PM
To: [EMAIL PROTECTED]
Subject: RE: PIX 501 and MSN Messanger Voice / Video Chat [7:
forget it...i got it working...there is a weird router set up
internally...just putting statics to the vpn client pool worked.
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Edward Sohn
Sent: Monday, December 09, 2002 3:09 PM
To: [EMAIL PROTECTED
: RE: more VPN fun... [7:58818]
What's the client behind? If it's behind a firewall, you need to make
sure that firewall allows UDP 500 and IP Protocol 50 (ESP) or IP
Protocol 51 (AH), depending on which you are using.
Josh
-Original Message-----
From: Edward Sohn [mailto:[EMA
it's either hardware failure on your end or circuit problems on the
local loop...
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Richard Campbell
Sent: Wednesday, December 11, 2002 11:45 PM
To: [EMAIL PROTECTED]
Subject: high CRC and runts error [7:59049
I have an HQ-to-Branch Office configuration with two separate VPN
connections like the following:
HQ LAN-- R1
---PIX1-INTERNETPIX2R2---Branch LAN
\
/
\
/
--R3-PIX3-INTERNET--PIX4-R4
The network
eddie
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Edward Sohn
Sent: Thursday, December 12, 2002 5:59 PM
To: [EMAIL PROTECTED]
Subject: HSRP [7:59148]
I have an HQ-to-Branch Office configuration with two separate VPN
connections like the following:
H
Has anyone used either of these routers in a VPN w/ EIGRP environment?
How is the performance? Any other experiences?
Please email me directly.
Thanks,
Ed
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=59502&t=59502
--
FAQ, l
Can anyone help me answer a few questions regarding this series router?
1. The spec sheet says it performs multiprotocol routing over ipsec.
My question is: how? Is there some inherent technology that performs
this feature, or is it the IOS's ability to create a GRE over an IPSEC
tunnel?
2. Wha
, 2002 1:32 PM
To: Edward Sohn
Cc: [EMAIL PROTECTED]
Subject: Re: 7200 Router Questions... [7:59645]
Ed, all,
1. no clue. probably the usual marketing crap.
2. NPE has a single cpu that performs all the tasks.
NSE has a PXF 'coprocessor' that can offload some tasks from the
ma
throughput
performance of a PIX 515 on a 3DES ipsec tunnel set up site-to-site? i
can't seem to find pps performance specs for the 7200 series...
thanks,
ed
-Original Message-
From: MADMAN [mailto:[EMAIL PROTECTED]]
Sent: Friday, December 20, 2002 1:46 PM
To: Edward Sohn
Cc: [EMAIL PROT
AM
To: Edward Sohn
Cc: [EMAIL PROTECTED]
Subject: Re: 7200 Router Questions... [7:59645]
You gotta have one or the other, It's the brains of the box!
Dave
Edward Sohn wrote:
> thanks.
>
> it seems that the NSE-1 is made for service providers (according to
> the link you
ou believe :)
Dave
Edward Sohn wrote:
> dave,
>
> that's the thing...i actually heard (from a cisco SE) that i am not
> required to have one. they just offload the processing.
>
> can someone verify for me, please?
>
> thanks,
>
> eddie
>
> -
the PA's, and a NPE or NSE card which
is on the otherside. The I/O cards contains you NVRAM, flash, console
connection and various LAN interfaces. The NPE or NSE contains the CPU
and DRAM.
Dave
Edward Sohn wrote:
> so maybe that's what he was referring to...can i just u
can anyone verify that the above module works in a 2600 series router?
i thought that the NM's were compatible with 2600 AND 3600 models.
however, i found this page that shows it's not supported.
http://www.cisco.com/warp/customer/107/nm-e2w.shtml
does anyone have a working configuration? what
thanks for the info, but according to the software advisor, the 1FE2W is
not even supposed to work in the 2621...
i have a 2620. do you think it will work? has anyone done it before?
please let me know. i really need to verify this for a production
environment.
thanks,
ed
-Original Messa
Anyone using these concentrators? I am specifically looking at either
the 3060 or 3080. If you have any experience with these guys, please
let me know of any "gotchas" or recommended configurations.
I guess, specifically:
1. What is the recommended software client to go with these guys?
2. Wher
Mike,
How are the PIXes connected? If via a crossover, you might be
experiencing excessive collisions. I've tested a similar configuration
as well, and I've found that placing a switch in between the two PIXes
will eliminate the collisions.
Ed
-Original Message-
From: [EMAIL PROTECTED]
Can anyone figure out why my dial backup solution is not establishing
EIGRP routes? The routers don't peer up, though everything else looks
and works fine. After the dialup establishes, I am able to ping each
Serial Interface, as well.
Thanks,
Ed
Here are the configs:
ROUTER A
Dave,
I actually had a similar concern a few weeks ago. According to this
link, it IS in fact possible for Mario to do so, because all 3600
routers appear to use filesystem class "B".
http://www.cisco.com/warp/public/63/pcmciamatrix.html
Ed
-Original Message-
From: [EMAIL PROTECTED] [m
ECTED]
Subject: Re: Loading IOS [7:61413]
I went in the lab and it didn't work. I pulled a flash card out of
the 3660 that had an image on it and also copied the running config onto
the flash then pulled it out and plugged it into a 3640, it did not see
either file.
Dave
Edward
Can anybody swap a lab date for late August (this year) in either SJ or
RTP with me for November 20th in SJ? Please let me know.
Thanks!
Eddie
[GroupStudy.com removed an attachment of type image/jpeg which had a name of
Notebook.jpg]
Message Posted at:
http://www.groupstudy.com/form/re
Sorry for the confusion, everyone.
I NEED a lab date in late August (on or around the 30th) to swap with my
date on November 20 in SJ. YOUR date may be at either the RTP or SJ
location.
Please let me know!
Thanks,
Eddie
[GroupStudy.com removed an attachment of type image/jpeg which had a
Hey all,
Still looking for a lab date on or around the 30th of August, 2002. If
you have a date available around that time, please email me directly
(and quickly).
I have a date on November 20th in SJ I would like to swap.
Thanks,
Eddie
[GroupStudy.com removed an attachment of type ima
Hey all,
I was able to get a lab date around my preferred time (August 29) in SJ.
Thanks for everyone's help and advice on this.
Now, I was wondering if anyone had an August 29 or 30 date in RTP that
they would be willing to swap with me. Maybe if SJ is closer and more
convenient for you (as
Hey everyone,
I'm trying to configure lab #16 of the CCIE Practical Studies Vol. 1
book (Cisco Press). I noticed that both of the routers configured for
ISDN backup are also configured as backup interfaces. Now, I can't
recall exactly where it is at the moment, but I could have sworn that I
re
custom
!
!
!
!
line con 0
line aux 0
line vty 0 4
!
!
end
THANKS!
Eddie
-Original Message-
From: Andre Riscalla [mailto:[EMAIL PROTECTED]]
Sent: Sunday, July 21, 2002 2:36 PM
To: Edward Sohn
Cc: [EMAIL PROTECTED]
Subject: Re: Lightstream PVC config problem... [7:49352]
Edward,
You are si
ernal SIMM (Sector size 256K). Configuration
> register is 0x2101
>
> --- Andre Riscalla
> wrote:
> >
> > A couple of suggestions:
> >
> > 1) Verify that your ATM interfaces are up and up
> > which i assume you
> > already did.
> >
> > 2) Si
Does anyone have any static PVC configurations for an L1010 with two
3620 routers with OC-3ATM cards? I still cannot get my configuration
working properly. I appreciate all the input, but nothing seems to be
working...can someone cut and paste from a working config that they've
used?
Thanks,
In my steps to troubleshooting, I'm getting the following error on my
L1010 when performing a "debug atm packet"
ATM12/0/2(O): VCD:0x22 DM:0x100Inactive or not configured VCD
Length:0x41
0100 0404 494C 4D49 A030 0202 292F 0201 0002 0100 3024 3011 060D 2B06
0104
0182 6102 0101 0107 0005 0030 0F06
In my steps to troubleshooting, I'm getting the following error on my
L1010 when performing a "debug atm packet"
ATM12/0/2(O): VCD:0x22 DM:0x100Inactive or not configured VCD
Length:0x41
0100 0404 494C 4D49 A030 0202 292F 0201 0002 0100 3024 3011 060D 2B06
0104
0182 6102 0101 0107 0005 0030 0F06
on each router.
Anyone have any ideas?
Thanks,
Eddie
-----Original Message-
From: Edward Sohn [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, July 24, 2002 9:17 PM
To: '[EMAIL PROTECTED]'
Subject: Anybody seen this error before re: ATM?
In my steps to troubleshooting, I'm
Hey all,
Still looking for a August 29th or 30th date in RTP. If you have one,
and San Jose is actually better/closer for you, I would be willing to
trade my August 29th in SJ.
Please let me know ASAP, and reply directly to me, if interested.
Thanks!
Eddie
[GroupStudy.com removed an atta
Hello,
I have two 2503 routers connecting together via ISDN through a Teltone
ILS-2000.
I *believe* that the ILS is configured correctly, as well as my SPIDs
and DNs on my routers. I set the "backup interface BRI0" on the calling
router, and it's verified in standby mode (sh ip int brie). I
Can anyone shed some light on the solution to CCBootcamp's lab 8a?
Specifically, question 21 on Task two?
I thought it was just an "aggregate address" command router 7, but it's
not working how it's supposed to. I cannot see the routes on R6 or R8.
Also, one of the routes (170.x.x.x) still show
Hello, all.
I will probably repeat this message daily for the next few days, as it
is more presently relevant than later (payment due soon). Please
disregard if it does not concern you...
I need a late October (post 25th) or early November (pre 4th) lab date
in SJ. If you feel ready to take th
Hello, all.
I will probably repeat this message daily for the next few days, as it
is more presently relevant than later (payment due soon). Please
disregard if it does not concern you...
I now have a more "marketable" lab date to swap. My date is now on
November 17th in SJ, and I would like t
Randy,
This appears to be a DHCP server querying its clients. This is pretty
common on a cable modem network. Yes, that is UDP port 67, and as you
can see, it's a broadcast. I wouldn't think it's a hacker, because of
the fact that it's a broadcast. It's probably just someone running a
DHCP se
My date is on November 17th in SJ, and I would like to swap for an SJ
date in early November (before the 4th), or late October (after the
27th).
Please let me know ASAP if you would like to swap.
Thanks in advance!
Eddie
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=52603
Hello, list
I have a November 17 lab date in SJ that I would like to swap with
someone who has a pre-Nov 4th date (no earlier than October 28th).
Please email me directly.
Thank you,
Eddie
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=52664&t=52664
--
Yes. That's about all it can run in the way of RP's
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Ivan
Sent: Thursday, September 05, 2002 9:35 AM
To: [EMAIL PROTECTED]
Subject: Rip on Pix [7:52723]
Hi all,
Can the pix firewall running routing proto
Whoever just took that Oct. 28th date in SJ, I'll trade you my Nov. 17th
date! You just beat me to it...=) =)
If anyone has a date between 10/28 and 11/3 in SJ, I have a 11/17 date
to trade with you...Please email me directly
Thanks,
Eddie
Message Posted at:
http://www.groupstudy.com/form/
Hello, all
I'll be taking my lab in a few weeks, and I want to make sure I
understand how the scoring system works. I've seen a lot of differing
opinions and reports on the subject, and I was wondering if there was an
"accurate" way to interpret the score.
For example, I understand that there
you're doing one-for-one NATing. i'll bet your argument states a range
of global IP addresses to translate to the local subnet...
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Pat Donlon
Sent: Friday, August 15, 2003 6:24 AM
To: [EMAIL PROTECTED]
Subjec
Oops. Didn't look at the output closely enough. Can you send the NAT
statements?
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Edward Sohn
Sent: Friday, August 15, 2003 7:36 AM
To: [EMAIL PROTECTED]
Subject: RE: PIX xlate question [7:74012]
y
85 matches
Mail list logo
