RE: {Spam?} question on acl [7:75258]

2003-09-11 Thread Reimer, Fred
Well, we have two right answers (you can do it with a wildcard mask of 0.0.0.254) and two wrong answers (it's not possible). I'll break the tie and say you can do it ;-) Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071

RE: question on acl [7:75257]

2003-09-11 Thread Reimer, Fred
Er, yes you can. Two people have already replied on how. Use a WILDCARD mask of 0.0.0.254. Simple, easy, effective. I'd hate to have to type in 128 permit statements. Probably end up writing a Perl one-liner, but the easier way is to use the proper WILDCARD mask. Fred Reimer - CCNA Eclipsys

RE: ciscoview-urgent [7:75227]

2003-09-11 Thread Reimer, Fred
his email, and should immediately delete it from your computer. -Original Message- From: milind tare [mailto:[EMAIL PROTECTED] Sent: Thursday, September 11, 2003 1:11 PM To: Reimer, Fred Cc: [EMAIL PROTECTED] Subject: RE: ciscoview-urgent [7:75227] hi reimer, Thanks for ur reply, and

RE: NAT and SAP [7:74982]

2003-09-11 Thread Reimer, Fred
SAP, SAP, what the heck is SAP? At first I thought it was SIP, but that doesn't sound right. Maybe it's referring to the COMPANY SAP? If so, what specific application are you talking about? I must say SAP's website is a nightmare. Looks like all marketing speak to me. Bunch of mumbo jumbo and

RE: ciscoview-urgent [7:75227]

2003-09-11 Thread Reimer, Fred
uld immediately delete it from your computer. -Original Message- From: milind tare [mailto:[EMAIL PROTECTED] Sent: Thursday, September 11, 2003 12:45 PM To: Reimer, Fred Cc: [EMAIL PROTECTED] Subject: RE: ciscoview-urgent [7:75227] hi reimer, Thanks for ur reply but not getting wh

RE: Network Benchmarking/Performance Analysis [7:74808]

2003-09-11 Thread Reimer, Fred
VitalNet from Lucent Technologies can use Cisco SAA, so in a way it's distributed polling. Any (recent) IOS device would become a sensor/collector. Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050

RE: ciscoview-urgent [7:75227]

2003-09-11 Thread Reimer, Fred
If you happen to be running PIM Sparse-Dense mode with auto-RP and "duplicate" loopback IP addresses then you need a special patch for CiscoWorks in order for it to properly discover the 6509's... This probably effects anything that has "duplicate" loopback IP addresses. Fred Reimer - CCNA Ecli

RE: Difference between Cisco VPN and PIX Firewall [7:75235]

2003-09-11 Thread Reimer, Fred
Scenario III is probably the most recommended. It is incorrect to say that the VPN Concentrator does not have filtering capabilities. It generally only allows traffic in its public interface necessary for VPN connections, so it is not any more inherently insecure as a PIX. It does not have all o

RE: ??? Dumb Consultant ??? - Please Help [7:75213]

2003-09-10 Thread Reimer, Fred
Well, I'm not a CCIE, but I don't think you need to be a CCIE to answer this question. The subnet mask has nothing to do with the amount of load on the network. A side effect of having a small network mask is that there are potentially more hosts on the network, which could mean that there is mor

RE: Studying Switching [7:75030]

2003-09-10 Thread Reimer, Fred
Heh, I installed quite a few of those Cisco router blades in Synoptics hubs! I also liked their SPARC network management modules, but I don't think that had anything to do with Cisco. Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell:

RE: Please Help - CIDR - How the bits work [7:75050]

2003-09-10 Thread Reimer, Fred
immediately delete it from your computer. -Original Message- From: Howard C. Berkowitz [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 10, 2003 12:57 PM To: [EMAIL PROTECTED] Subject: RE: Please Help - CIDR - How the bits work [7:75050] At 11:34 AM -0400 9/10/03, Reimer, Fred wrote: >Ye

RE: Please Help - CIDR - How the bits work [7:75050]

2003-09-10 Thread Reimer, Fred
Oh, it's just getting fun. It's not like we are flaming anyone. We are just expressing our opinions! ;-) I'd agree with you. No BGP for NA's. And as far as who I'd want touching my Internet facing router, it would depend on what type of business it was. If it was a small business, where all th

RE: Please Help - CIDR - How the bits work [7:75050]

2003-09-10 Thread Reimer, Fred
I've always liked hex myself. A hex mask of FF.FF.F8.00 can be written as F800 and still mean the same thing. You obviously can't do that with 255.255.128.0 (255.255.128.0 != 2,552,551,280). While binary works the same way as hex in this manner, it is much to long for my tastes. Plus, hex i

RE: Cisco PVST plus [7:75158]

2003-09-10 Thread Reimer, Fred
That is correct. Or at least it can only support one VLAN in common with the Cisco gear. It can have all the VLANs it wants as long as it does not have dual links to the Cisco gear, creating a loop which will not be blocked with Spanning Tree, because it doesn't support PVST+. BTW - what are "Hw

RE: Please Help - CIDR - How the bits work [7:75050]

2003-09-10 Thread Reimer, Fred
Yes, but the CCIE labs are supposed to be for ISP level engineers, who almost certainly won't be using default routes most of the time. It should be assumed that by the time you get to the CCIE level you have much experience in default routing. Fred Reimer - CCNA Eclipsys Corporation, 200 Ashfo

RE: Please Help - CIDR - How the bits work [7:75050]

2003-09-10 Thread Reimer, Fred
6:37 PM To: 'Reimer, Fred'; [EMAIL PROTECTED] Subject: RE: Please Help - CIDR - How the bits work [7:75050] Oh, and while I'm on the subject - why EIGRP? This is a proprietary Cisco Protocol. OK, I believe that Juniper may have implemented it, but to the best of my knowledge no one

RE: Please Help - CIDR - How the bits work [7:75050]

2003-09-10 Thread Reimer, Fred
gt; > Dom Stocqueler > SysDom Technologies > Visit our website - www.sysdom.org > > > -Original Message- > From: Dom [mailto:[EMAIL PROTECTED] > Sent: 09 September 2003 23:37 > To: 'Reimer, Fred'; '[EMAIL PROTECTED]' > Subject: RE: Please

RE: IPSEC with STATIC NAT [7:74971]

2003-09-10 Thread Reimer, Fred
ccess-list extended vpn_tunnel permit ip 172.16.254.0 0.0.0.255 192.168.0.0 0.0.255.255 access-list 120 permit ip 172.16.254.0 0.0.0.255 192.168.0.0 0.0.255.255 ! route-map static_servers_bypass_NAT permit 10 match ip address 120 set ip next-hop 1.1.1.2 ! Phoenix_Colo# Reimer, Fred wrote: >

RE: Please Help - CIDR - How the bits work [7:75050]

2003-09-10 Thread Reimer, Fred
age- From: Dom [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 09, 2003 6:59 PM To: [EMAIL PROTECTED]; 'Reimer, Fred'; [EMAIL PROTECTED] Subject: RE: Please Help - CIDR - How the bits work [7:75050] And one last point, No LAN is an island, why two IG(P) protocols and no EG(P) pro

RE: Please Help - CIDR - How the bits work What I figured out [7:75173]

2003-09-10 Thread Reimer, Fred
x27;m incorrect here) you just have to watch out for address over lap neer your subnetwork boundries. I think I got it. Man I love this news group! Steve Priscilla Oppenheimer wrote: > Reimer, Fred wrote: > >>No offense, but this is CCNA material. > > > Do they still

RE: Please Help - CIDR - How the bits work [7:75050]

2003-09-10 Thread Reimer, Fred
No offense, but this is CCNA material. If you are going for your CCNP, then you should already have your CCNA and know the answer. But anyway... If you need a network with 400 hosts, the smallest subnet would have a /23 mask. So take the first part of your given network and assign it to that:

RE: Please Help - CIDR - How the bits work [7:75050]

2003-09-09 Thread Reimer, Fred
r rely on this email, and should immediately delete it from your computer. -Original Message- From: "Chuck Whose Road is Ever Shorter" [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 09, 2003 3:56 PM To: [EMAIL PROTECTED] Subject: Re: Please Help - CIDR - How the bits

RE: Please Help - CIDR - How the bits work What I figured out [7:75101]

2003-09-09 Thread Reimer, Fred
x27;m incorrect here) you just have to watch out for address over lap neer your subnetwork boundries. I think I got it. Man I love this news group! Steve Priscilla Oppenheimer wrote: > Reimer, Fred wrote: > >>No offense, but this is CCNA material. > > > Do they still

RE: Please Help - CIDR - How the bits work [7:75050]

2003-09-09 Thread Reimer, Fred
, print or rely on this email, and should immediately delete it from your computer. -Original Message- From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 09, 2003 12:33 PM To: [EMAIL PROTECTED] Subject: RE: Please Help - CIDR - How the bits work [7:75050] Rei

RE: Please Help - CIDR - How the bits work [7:75050]

2003-09-09 Thread Reimer, Fred
- From: Reimer, Fred [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 09, 2003 10:26 AM To: [EMAIL PROTECTED] Subject: RE: Please Help - CIDR - How the bits work [7:75050] No offense, but this is CCNA material. If you are going for your CCNP, then you should already have your CCNA and know

RE: Please Help - CIDR - How the bits work [7:75050]

2003-09-09 Thread Reimer, Fred
No offense, but this is CCNA material. If you are going for your CCNP, then you should already have your CCNA and know the answer. But anyway... If you need a network with 400 hosts, the smallest subnet would have a /23 mask. So take the first part of your given network and assign it to that:

RE: Cisco Vs. Low cost switches -Whats the Diff ? [7:74987]

2003-09-08 Thread Reimer, Fred
If you're not getting more than a few MB of transfer speed out of a 100Mb link, then it is undoubtedly a autonegotiation / speed issue. Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050 NOTICE; This

RE: IPSEC with STATIC NAT [7:74971]

2003-09-08 Thread Reimer, Fred
You do need NAT traversal if you "only" change the IP addresses. Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050 NOTICE; This email contains confidential or proprietary information which may be le

NetworkSim Project to be Hosted by SourceForge [7:74976]

2003-09-08 Thread Reimer, Fred
I just received confirmation that my NetworkSim project has been approved by SourceForge. It will take me a while to get the proper licensing materials embedded in the source files, but look for it to become active in the next few days. I'll need to look into what I need to do to get the files up

RE: vlan urgent [7:74955]

2003-09-08 Thread Reimer, Fred
Theoretically, you don't even need a switch in the middle. If these are ISP-connected routers, and the firewall is doing the NAT, then the three routers must be doing BGP to the ISPs by definition. They would each have full routing tables. On the "inside" (external to PIX) segment, the three rou

RE: How can we eliminate the creation of summary route pointing [7:74975]

2003-09-08 Thread Reimer, Fred
Why would you want to? Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050 NOTICE; This email contains confidential or proprietary information which may be legally privileged. It is intended only for

RE: EtherChannel On Cat6500 [7:74944]

2003-09-08 Thread Reimer, Fred
8 max, not 4. Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050 NOTICE; This email contains confidential or proprietary information which may be legally privileged. It is intended only for the named

RE: EtherChannel On Cat6500 [7:74944]

2003-09-08 Thread Reimer, Fred
We've installed tons of 6509's with EtherChannel ports spanned between modules. Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050 NOTICE; This email contains confidential or proprietary information

RE: DR Solution [7:74875]

2003-09-05 Thread Reimer, Fred
I'm confused. Assuming that the users are separated from their servers by at least one router hop (otherwise if the servers failed, so would the users, so what's the use of the DR?), then why can't you just assign the same IP addresses to the servers at the DR site? If the production servers are

RE: Network Benchmarking/Performance Analysis [7:74808]

2003-09-04 Thread Reimer, Fred
How about Cisco Systems? Just use their SAA. Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050 NOTICE; This email contains confidential or proprietary information which may be legally privileged. I

Router Simulator [7:74816]

2003-09-04 Thread Reimer, Fred
With some prodding by Doug Stevenson, and probably in the wrong direction, I'm working on a router simulator in my spare time. It's written in Perl using POE. So far you can add interfaces, assign addresses, enable RIP, add networks to RIP, connect interfaces together. The RIP "process" (POE ses

RE: ??? Layer 2 routing ??? [7:74788]

2003-09-04 Thread Reimer, Fred
I'm sure this HAS to be somewhere on Cisco's web site, but a brief general explanation is this: Cisco, and most other vendor's hardware now-adays, has ASIC chips that inspect ingress traffic coming into the switch. It also has a shared memory buffer that it stores cached route-switch information.

RE: Calls made by DNS [7:74785]

2003-09-04 Thread Reimer, Fred
A dial-list can specify an extended access list, why don't you just create one with time ranges. Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050 NOTICE; This email contains confidential or proprie

RE: OT Gibberish in email [7:74740]

2003-09-04 Thread Reimer, Fred
John Neiberger [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 03, 2003 5:36 PM To: [EMAIL PROTECTED] Subject: RE: OT Gibberish in email [7:74740] Reimer, Fred wrote: > > It is an attempt by the SPAMers to avoid SPAM software that > takes a hash of > the SPAM and blocks SPAM on

RE: ping cisco@groupstudy.com [7:74702]

2003-09-04 Thread Reimer, Fred
Wow! Given your CCIE number you must be using a REALLY old router for that ping. Most newer models send five echo requests, not three. Either that or some packets got lost somewhere... Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Ce

RE: 6509 Power Supply Swap -- No Swap? [7:74695]

2003-09-04 Thread Reimer, Fred
No, what was your experience??? I expect from your question that you had issues... Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050 NOTICE; This email contains confidential or proprietary informa

RE: OT Gibberish in email [7:74740]

2003-09-03 Thread Reimer, Fred
It is an attempt by the SPAMers to avoid SPAM software that takes a hash of the SPAM and blocks SPAM on machines based on these hash values. There are some anti-SPAM "solutions" out there that basically relies on the users to mark email as SPAM. When they do, the client machines send the hash of

RE: Ip snooping in cisco routers [7:74708]

2003-09-03 Thread Reimer, Fred
m your computer. -Original Message- From: dre [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 03, 2003 12:37 PM To: [EMAIL PROTECTED] Subject: Re: Ip snooping in cisco routers [7:74708] ""Reimer, Fred"" wrote in message ... > Cisco routers don't have the ab

RE: Ip snooping in cisco routers [7:74708]

2003-09-03 Thread Reimer, Fred
Cisco routers don't have the ability to capture packets. However, you can use an ACL and the debug ip packet command to get some limited information. Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050

RE: 6509 Power Supply Swap -- No Swap? [7:74695]

2003-09-02 Thread Reimer, Fred
No, what was your experience??? I expect from your question that you had issues... Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050 NOTICE; This email contains confidential or proprietary informa

RE: Urgent [7:74682]

2003-09-02 Thread Reimer, Fred
I would hope so, especially if they support Spanning Tree. It would be kind of hard to run the Spanning Tree protocol without a MAC address... Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050 NOTI

RE: Amazing Spanning Tree [7:74594]

2003-09-02 Thread Reimer, Fred
is message. If you are not the named recipient, you are not authorized to use, disclose, distribute, copy, print or rely on this email, and should immediately delete it from your computer. -Original Message- From: Wilmes, Rusty [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 02,

RE: PPP authentication [7:74551]

2003-09-02 Thread Reimer, Fred
>From the Cisco Security Configuration Guide: "When CHAP is enabled on an interface and a remote device attempts to connect to it, the access server sends a CHAP packet to the remote device. The CHAP packet requests or "challenges" the remote device to respond. The challenge packet consists of an

RE: Question regarding dialer-watch [7:74667]

2003-09-02 Thread Reimer, Fred
What are you trying to accomplish? A configuration using specific protocols for some lab, or are you just trying to get some connectivity up and running? Why don't you just use backup interface? Ah, it looks like you are doing this for a lab, and not a real-life reason. O.K., is your IPsec conn

RE: Amazing Spanning Tree [7:74594]

2003-09-02 Thread Reimer, Fred
Think of it like this. Each switch is supposed to block redundant ports leading to the root bridge. Say Switch1 and Switch2 are interlinked, and also have downlink connections to the root bridge, like this: Switch1 -- Switch2 | | | | Core1 -- Core2 Sa

RE: Interesting Question [7:74652]

2003-09-02 Thread Reimer, Fred
otify the author by replying to this message. If you are not the named recipient, you are not authorized to use, disclose, distribute, copy, print or rely on this email, and should immediately delete it from your computer. -Original Message- From: Bharani [mailto:[EMAIL PROTECTED] Sent: Tuesday,

RE: Interesting Question [7:74652]

2003-09-02 Thread Reimer, Fred
There is none. Other than the fact that it is the last Class A address. Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050 NOTICE; This email contains confidential or proprietary information which m

RE: PIX VPN Client Configuration - At my wit's end! [7:74363]

2003-09-02 Thread Reimer, Fred
Hmm, that's bizarre. I'm running 4.02B and I can use SHA. Where did you get the information that 3.6 and above don't support SHA??? Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050 NOTICE; This

RE: Amazing Spanning Tree [7:74594]

2003-09-02 Thread Reimer, Fred
The problem with analogies is that they often help you understand the correct answer to a question, but seldom help you understand the "why" behind the answer. The analogies I like to use most often are the models of the protocols themselves. Think of each protocol as a state machine, or rather s

RE: IS-IS [7:74508]

2003-09-02 Thread Reimer, Fred
You wrote: " A few years ago we were all (well some of us) scared about the scalability of OSPF - how much memory, processing power and how many AS's could it scale to. This is why IS-IS was looked at by tier 1 and 2 carriers. In those days, a 7206 with a 150MHz proc was common place, and we were

RE: PPTP win98 to PIX not working [7:74521]

2003-09-02 Thread Reimer, Fred
Windows automatically adds a dynamic route once the PPTP connection is established, or at least it should. Basically, it sets the metric to 2 for your "old" default router, and adds in a new default route with a metric of 1 once the tunnel is established. If you are not getting the tunnel establi

RE: ospf type 5 lsas [7:74632]

2003-09-02 Thread Reimer, Fred
Are you using unnumbered on your serial interface? Try using an assigned IP address and see if that makes a difference. Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050 NOTICE; This email contains

RE: Amazing Spanning Tree [7:74594]

2003-09-02 Thread Reimer, Fred
The subject should be renamed Amazing Answers... Whether a port is blocking or not, or even if Spanning Tree is running on the device, has absolutely no bearing on whether the port is physically up or down. The rest of the info is acceptable, but to throw that little nugget of "information" in th

RE: CCIE changes [7:74580]

2003-09-01 Thread Reimer, Fred
The new exams will include features that are available in the 12.2 version of code Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050 NOTICE; This email contains confidential or proprietary infor

RE: 802.3x switch traffic disruption [7:74455] [7:74455]

2003-08-31 Thread Reimer, Fred
But you always have to consider caveat lector Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050 NOTICE; This email contains confidential or proprietary information which may be legally privilege

RE: TCP/UDP port for CHAP [7:74480]

2003-08-30 Thread Reimer, Fred
CHAP authentication does not use a TCP/UDP port. CHAP is handled in the PPP protocol between the client and the router. The router may use some other type of authentication (RADIUS, TACACS+, etc) to authenticate the user to some outside security server, but the CHAP communications is carried over

RE: TCP/UDP port for CHAP [7:74480]

2003-08-29 Thread Reimer, Fred
CHAP authentication does not use a TCP/UDP port. CHAP is handled in the PPP protocol between the client and the router. The router may use some other type of authentication (RADIUS, TACACS+, etc) to authenticate the user to some outside security server, but the CHAP communications is carried over

RE: SAFE and the Holy Hand Grenade of Antioch [7:74304]

2003-08-26 Thread Reimer, Fred
Please pass this on to Annlee. I've already sent another message with an excerpt (fair use!) from the new Cisco training materials that refutes this. The "threats" are: Structured Unstructured Internal External The "attacks" are: Reconnaissance Access Denial of Service I don't know what "data

RE: BCRAN 2.0 questions [7:13450]

2003-08-26 Thread Reimer, Fred
We tend not to answer specific short questions like those that appear they may come from an actual test, especially when presented in a list like that. There is a confidentiality agreement you should have read when you took the test... The purpose of the exams is to test your understanding of the

RE: SAFE and the Holy Hand Grenade of Antioch [7:74304]

2003-08-26 Thread Reimer, Fred
Indubitably - Checked on www.m-w.com :-) Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050 NOTICE; This email contains confidential or proprietary information which may be legally privileged. It is i

RE: help with vpn scenario [7:74366]

2003-08-26 Thread Reimer, Fred
It depends on Company B's firewall, and how it is setup to allow IPsec traffic (or not). Theoretically, there is no difference between connecting to Company A via an ISP connection and connecting to Company A through Company B, except that Company B's firewall may not allow or be capable of allowi

RE: SAFE and the Holy Hand Grenade of Antioch [7:74304]

2003-08-26 Thread Reimer, Fred
74304] At 7:10 PM + 8/25/03, Reimer, Fred wrote: >A structured threat is a threat from someone who has experience and >knowledge as far as breaking into networks. An unstructured threat is a >threat by a script kiddie. I guess they use structured because a >knowledgeable black

RE: Urgent . ATM [7:74345]

2003-08-25 Thread Reimer, Fred
That would kind of be like finding out the DLCI numbers for a Frame Relay network without the telco telling you what they are Wouldn't it? Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050 NOTICE

RE: SAFE and the Holy Hand Grenade of Antioch [7:74304]

2003-08-25 Thread Reimer, Fred
email, and should immediately delete it from your computer. -Original Message- From: Priscilla Oppenheimer [mailto:[EMAIL PROTECTED] Sent: Monday, August 25, 2003 1:46 PM To: [EMAIL PROTECTED] Subject: RE: SAFE and the Holy Hand Grenade of Antioch [7:74304] Reimer, Fred wrote

RE: SAFE and the Holy Hand Grenade of Antioch [7:74304]

2003-08-25 Thread Reimer, Fred
MCNS is old material. The new material is SECUR. The new material, all five courses, say it's unstructured, structured, internal, and external... Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050 NO

RE: Dumb Question [7:74315]

2003-08-25 Thread Reimer, Fred
Difference between Cisco and Nortel - main diff is cli and menu driven? Not necessarily. If you are talking about the old Wellfleet/Bay Nortel routers, then they certainly have a CLI. You just need to know the MIB very well, and you should be able to configure it with the CLI. I know it used to

RE: SAFE and the Holy Hand Grenade of Antioch [7:74304]

2003-08-25 Thread Reimer, Fred
Structured Unstructured Internal External It's covered in every training course I've taken so far on my way to CCSP. CSVPN covers it, SECUR covers it, CSI covers it, I believe CSPFA covers it, and CSIDS probably covers it. Joshua covered the four remote-access types nicely... Fred Reimer - CCNA

RE: VPN Client [7:74205]

2003-08-19 Thread Reimer, Fred
It depends on the configuration of the hub. If the hub supports both 3DES and DES, then the client will be able to connect. What, exactly are you asking??? Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-2

RE: Trunking ISL and 802.1Q on the same Interface [7:74197]

2003-08-19 Thread Reimer, Fred
No you don't (have a couple of VLANs, some with ISL and others with 802.1q). The trunking protocol is not an attribute of a VLAN, it is an attribute of a physical (trunking) port. You have some VLANs, put them on whatever trunk port you desire. Fred Reimer - CCNA Eclipsys Corporation, 200 Ashfo

RE: Trunking ISL and 802.1Q on the same Interface [7:74197]

2003-08-19 Thread Reimer, Fred
No you don't (have a couple of VLANs, some with ISL and others with 802.1q). The trunking protocol is not an attribute of a VLAN, it is an attribute of a physical (trunking) port. You have some VLANs, put them on whatever trunk port you desire. Fred Reimer - CCNA Eclipsys Corporation, 200 Ashfo

RE: IPSEC with 2 ISPs to Single destination [7:74173]

2003-08-19 Thread Reimer, Fred
I think you want the next hop in your route-maps to be 192.168.10.2 and 192.168.20.2 respectively. Send it through the GRE tunnel. Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050 NOTICE; This email

RE: BGP Connectivity Problem [7:74100]

2003-08-18 Thread Reimer, Fred
The default route on your TFTP server is not set properly. Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050 NOTICE; This email contains confidential or proprietary information which may be legally

RE: how does firewall & switch port block Blaster virus? [7:74103]

2003-08-18 Thread Reimer, Fred
Cisco PIX and IOS software (with the FW/IDS feature set) includes some virus/attack blocking capabilities. It is more limited than their stand-alone IDS products. For more detail, I think it would be helpful to know exactly what your friend said. What were they trying to suggest? Fred Reimer -

RE: ACL for DMVPN [7:74028]

2003-08-17 Thread Reimer, Fred
I don't know about the DMVPN, or what it even is, but for a "standard" IPsec VPN the ports would be UDP 500, and PROTOCOLS 50 and 51. Now, that is assuming that there is no NAT going on, and you are using tunnel mode, so that you don't see the GRE tunnel in the first header. If there is NAT, then

RE: can't ping any ip on the network from SC0 [7:74064]

2003-08-17 Thread Reimer, Fred
There are know bugs in the IOS/CatOS hybrid code where the cef adjacencies are not updated correctly. Basically, the MSFC thinks it programmed the SUP caches correctly, when it did not. If you are on an old version of code, I would suggest upgrading to a later version. I don't have the bug ID ha

RE: OT Microsoft worm [7:74045]

2003-08-17 Thread Reimer, Fred
lto:[EMAIL PROTECTED] Sent: Saturday, August 16, 2003 11:26 PM To: [EMAIL PROTECTED] Subject: Re: OT Microsoft worm [7:74045] ""Reimer, Fred"" wrote in message news:[EMAIL PROTECTED] > For reasons of confidentiality I won't and can't name any names, but I am &

RE: router-id in different protocols [7:74054]

2003-08-16 Thread Reimer, Fred
It is VERY important to know what interfaces is used for the OSPF router ID, and to make sure that interface is a loopback interface. If you let it choose a normal interface, and that interface goes down, your OSPF process will essentially bounce because it will select another interface IP as the

RE: wireless security and VPN software? [7:73988]

2003-08-16 Thread Reimer, Fred
Hmm, PSPF definitely sounds interesting, but I'd recommend requiring the integrated Cisco firewall in the VPN client, and not allowing split tunneling. Also, there is apparently a working group working on VPN multicast... Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlant

RE: OT Microsoft worm [7:74045]

2003-08-16 Thread Reimer, Fred
For reasons of confidentiality I won't and can't name any names, but I am aware of several hospitals that were affected pretty seriously. Everyone here knows that Cisco Call Manager runs on Windows, so imagine what happens to your entire phone infrastructure if you are running VoIP. Network grind

RE: wireless security and VPN software? [7:73988]

2003-08-15 Thread Reimer, Fred
Well, I thought for sure I was going to fail, but I passed the CSI test with a score of 902. Needed 825 out of 1000... After giving it some thought, I think it's probably better if I don't comment on the wireless questions at this point. I had typed up quite a bit of observations that I just del

RE: hsrp default route in ospf [7:74017]

2003-08-15 Thread Reimer, Fred
No, that would not make sense. Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050 NOTICE; This email contains confidential or proprietary information which may be legally privileged. It is intended o

RE: wireless security and VPN software? [7:73988]

2003-08-14 Thread Reimer, Fred
Being in healthcare, I have some strong views on this topic. Unfortunately, I'm cramming for the CSI test I have tomorrow, and I still have two chapters to go through on the KnowledgeNet course. So, you will just have to wait... LOL Expect some comments on EAP-TLS, WPA, and assorted technologie

RE: tcp [7:73518]

2003-08-14 Thread Reimer, Fred
A "window" is not a thing that gets sent in a TCP session. You don't send "windows." A window is the size of the TCP receive buffer. A receiver can send an ACK before its receive buffer is full. Perhaps you are thinking of a "segment" in Cisco's terminology, or a chunk of data from one TCP appl

RE: Loopback Interface [7:73305]

2003-08-14 Thread Reimer, Fred
It's very simple. A loopback interface provides a connection point on a router that is not tied to a physical interface. It is very useful in many situations, for basically the same reason. Take OSPF for example. Without a loopback it will use the address of one of its physical interfaces for t

RE: Can 802.1q & isl co-exist on same network?? [7:73511]

2003-08-14 Thread Reimer, Fred
ctly across both the 802.1q and ISL trunks as follows: 3524 PCa in Vlan 3 | | 802.1q trunk | 3508 | | ISL trunk | 3524 PCb in Vlan 3 Can PCa reach PCb ??? "Reimer, Fred" wrote: > You can mix and match on different ports in the same switch. But obviousl

RE: Cisco 806 ? [7:73613]

2003-08-14 Thread Reimer, Fred
Why don't you consider the VPN Concentrator 3002 Hardware Client. It offers LAN-to-LAN VPN capabilities, can be remotely upgraded automatically, etc. You can even get one with an 8-port 10/100 switch for the small locations. The CVPN3002-8E-BUN-K9 lists for $1,195. It cost more than a 831, at $64

RE: multiple ospf processes & route insertion [7:73727]

2003-08-14 Thread Reimer, Fred
I haven't read the rest of the replies to this yet, but I think there is some confusion (probably on my part reading the post I replied to). The post I replied to talked about "putting into the [OSPF] routing table." If there is a static and a BGP route, the router should put both into the active

RE: multiple ospf processes & route insertion [7:73727]

2003-08-14 Thread Reimer, Fred
O.K., no problem, everyone makes mistakes, and that was a pretty easy one to make. Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050 NOTICE; This email contains confidential or proprietary informati

RE: multiple ospf processes & route insertion [7:73727]

2003-08-14 Thread Reimer, Fred
O.K., no problem, everyone makes mistakes, and that was a pretty easy one to make. Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050 NOTICE; This email contains confidential or proprietary informati

RE: VPN Best Hardware to use? [7:73793]

2003-08-14 Thread Reimer, Fred
I'd consider the 3005 at the remote sites. It has the capability to do a LAN-to-LAN NAT, where if you had customer A and customer B that both used 10.1.x you could map them to 45.1 and 45.2 respectively, or any other equal-mask network. Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Cente

RE: Bad mask /24 for address ???? [7:73801]

2003-08-14 Thread Reimer, Fred
That's a zero subnet, there are no 1 bits in the subnet. Subnet bits are 0.255.255.0, and they are all zero's... Fred Reimer - CCNA Eclipsys Corporation, 200 Ashford Center North, Atlanta, GA 30338 Phone: 404-847-5177 Cell: 770-490-3071 Pager: 888-260-2050 NOTICE; This email contains confid

RE: CCDA (DESGN 640-861) ....... A BEAST ???? [7:73770]

2003-08-14 Thread Reimer, Fred
" FWIW, I just ran into the following: when you take the SECUR 642-501, CSPFA 642-521, or CSVPN 642-511 exams and you are a CCNA or CCDA recert candidate, if you pass the exam your NA or DA is recertified. I haven't got the time to chase other exams, but somebody else might." What exactly do

RE: CCDA (DESGN 640-861) ....... A BEAST ???? [7:73770]

2003-08-14 Thread Reimer, Fred
sional-level exams, does your Associate-level cert get updated, even > if it hasn't expired? Or does it update iff it has already expired? > > Annlee > > -Original Message- > From: Reimer, Fred [mailto:[EMAIL PROTECTED] > Sent: Monday, August 11, 2003 1

ATM on Lab [7:73923]

2003-08-14 Thread Reimer, Fred
They told us in the Networkers Power Session that the only thing you needed to know about ATM was how to configure a router as a client connection. Be able to setup a PVC, SVC (Using ILMI), and Classical IP-over-ATM (yuck), including setting up a router as an ARP Server. They specifically ruled o

RE: VPN Best Hardware to use? [7:73793]

2003-08-14 Thread Reimer, Fred
The 3000's support fail-over just fine, and the new version even supports "multi-entry point" VPNs (like Check Point has for years). Basically meaning that at your main site you can have two 3030's with connections to different ISP's and totally different external addresses. See: "Backup LAN-to-

  1   2   3   >