ou could use logging
access-lists. There is also a very good paper on tracking packet floods
available on CCO.
hth
Reinhold
--
Reinhold Fischer [EMAIL PROTECTED]
CCNP-Security/SunCSA/HP Certified Consultant for Network Management
On Thu, 25 Jan 2001, [EMAIL PROTECTED] wrot
Source address or interface:
hth
Reinhold
--
Reinhold Fischer [EMAIL PROTECTED]
CCNP-Security/SunCSA/HP Certified Consultant for Network Management
On Thu, 25 Jan 2001 [EMAIL PROTECTED] wrote:
> Hi
>
> When I ping from a router dose it take the loopback ip a
you need to have Enterprise IOS to create more than 5 lines
--
Reinhold Fischer [EMAIL PROTECTED]
CCNP-Security/SunCSA/HP Certified Consultant for Network Management
On Tue, 19 Dec 2000, Larry Ogun-Banjo wrote:
> Could anyone kindly assist, please. On a Ci
- could fit
your needs).
greetings
Reinhold
--
Reinhold Fischer [EMAIL PROTECTED]
CCNP-Security/SunCSA/HP Certified Consultant for Network Management
On Wed, 27 Dec 2000, stephano mwendo wrote:
> Haloo guys,
> I have one problem here which is troubling me.
> I
port used
as SPAN port to send data.
hth
Reinhold
--
Reinhold Fischer [EMAIL PROTECTED]
CCNP-Security/SunCSA/HP Certified Consultant for Network Management
On Fri, 29 Dec 2000, Priscilla Oppenheimer wrote:
> Hi folks,
>
> If I connect a Sniffer-like devi
ote Control an SP2 client.
:
:When you upgrade to SP2, ONLY the Admin console on the site server is upgraded at the
:same time. All remote Admin consoles need to be updated individually.
Could it be that the hosts are winnt workstations with an installed Microsoft
System Management Server Client ?
ht
matches or not.
greetings
Reinhold
--
Reinhold Fischer [EMAIL PROTECTED]
CCNP/SunCSA/HP Certified Consultant for Network Management
On Sun, 17 Sep 2000, Mohammed Hussain wrote:
> Hi
>
> I applied access-list for serial inbound to see the traffic. But logging is
:
DA: 6 octets
SA: 6 octets
Type: 2 octets
Payload(Data): up to 1500 octets
Frame Check Sequence (FCS): 4 octets
sum: 1518 octets
greetings,
Reinhold
--
Reinhold Fischer [EMAIL PROTECTED]
CCNP/SunCSA/HP Certified Consultant for Network Management
On Mon, 2 Oct 2000, M. A
It uses neither udp nor tcp. It uses its own ip protocol (protocol number 88).
TCP has ip protocol nr. 6, UDP has ip protocol nr. 17.
hth, Reinhold
--
Reinhold Fischer [EMAIL PROTECTED]
CCNP/SunCSA/HP Certified Consultant for Network Management
On Mon, 2 Oct 2000, kikpasa
i think it has nothing to do with the ring speed. To use fullduplex the
routerport (i hope you are referring to a router port) has to be connected
to a tokenring switch. no clue if it could work too in a ring with only
two stations. lets see what others say ...
hth
Reinhold
--
Reinhold
jason,
had used a similar setup (had to use nat three times) with cisco routers
with success. The router does proxy arp in my case. Cannot comment about
the sun/firewall1 stuff ...
hth
Reinhold
--
Reinhold Fischer [EMAIL PROTECTED]
CCNP/SunCSA/HP Certified Consultant for
check the spanning tree settings. probably the port on the catalyst is
not in forwarding state as the dhcp clients try to get their lease from
the dhcp server. disable spanning tree if you don't need it. if you need
it, setting the ports to portfast might help.
hth
Reinhold
--
Rei
hyperterm. I use
110 as example. Now just press a few different keys repeatedly. Thies issued the
break signal. Now switch back to 9600 bits per second and continue the usual
procedure.
hth
Reinhold
--
Reinhold Fischer [EMAIL PROTECTED]
CCNP/SunCSA/HP Certified Consultant for
detailled information how the different tools work you can use the
search function on http://www.cert.org (watch word-wrap):
http://search.cert.org/query.html?rq=0&col=allcert&ht=0&qp=&qt=tcp+syn+attack&qs=&qc=&pw=100%25&ws=1&la=&qm=0&st=1&nh=25&l
Please correct me if i am wrong here, but isn't it required to connect RI
to RO to form the ring ? I always kept them connected together when using
the MAU in a lab environment. To test the ports i can only agree to
ElephantChild's method.
Greetings
Reinhold
On Sun, 1 Apr 2001, ElephantChild w
a directed broadcast comes from outside of the subnet and is directed to
the broadcast address of the subnet. this can be abused to do bad things
with it. just imagine sending a packet with a spoofed source address to
the broadcast address of a subnet. all the hosts that react on the packet
will
hi,
there is a very basic terminal program included in solaris
called 'tip'. You have to add a line to /etc/remote to use
it comfortably. I added this line to /etc/remote:
serial2:dv=/dev/cua/b:br#9600
that means i use serial B with 9600 bps
to start tip i use then 'tip serial2'
to quit tip
Some other stations are trying to access the IP addresses marked as
incomplete,
therefore the router tries to arp for them. Because the stations do not exist
on your network, the arp request is not successful. i would setup 'logging
accesslists' inbound on the other interfaces of the router to tra
Hi Hans,
the echo reply is the answer packet to the echo request. so with the part
of configuration that you gave, the echo request goes 'out' of interface
e0. There is no outgoing access-list set, so the echo request will reach
its destination. the echo reply comes from 171.21.50.2 and goes back
Hi RF,
as i took the MCNS training, we also discussed CiscoSecureACS for Unix and
NT. The Coursebook says strictly that only the sparc architecture of
solaris is supported. Thats waht i found on the Cisco Documentation CD:
http://
www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/cs_unx
hi,
could it be that it is a channelized E1 ? You can use the 30 B-Channels
separately. Here is how it looks on one of our routers:
Excerpt from 'show version':
cisco 4500 (R4K) processor (revision B) with 32768K/4096K bytes of memory.
Processor board ID 01838185
R4600 processor, Implementation
Next try ... Have to take care on characters that appear also in html-mail
...
hi,
could it be that it is a channelized E1 ? You can use the 30 B-Channels
separately. Here is how it looks on one of our routers:
Excerpt from 'show version':
cisco 4500 (R4K) processor (revision B) with 32768K/4
Hello John,
we experience the same Problems with Baystack 350F-HD switches with
Software Release 3.0.0.14. We donwgraded one of these to 2.x Software
release and the problem went away. We do not have an actual maintenance
contract with nortel/baynetworks so we have no possibility to verify if
the
Regarding the Slowlaris box i can give you a hint. Look at the
/etc/init.d/inetinit
file of the solaris box. It is very well explained there under which
circumstances
solaris acts as a router or not.
Excerpt from this file:
# Determine how many active interfaces there are and how many pt
Deleting subinterfaces often requires a 'reload' for them to disappear.
Greetings
Reinhold
On Mon, 28 May 2001, Arun wrote:
> Hi
> let me explain what i mean to ask
> i try to configured a serial interface(sub interface) on ser1/3 i could n't
> achieve what i was trying to do (i was trying to
Hi RamG,
tell us more about to what the Tokenring Interface is connected to.
a MAU ? a TR-Switch ? Is the port you want to connect to and the cabling
fine and does it support the configured 16MHz TokenRing ?
Reinhold
On Mon, 28 May 2001, RamG wrote:
> Hello Gang - I am having problem bring up
The IOS you are using is probably not supporting this hardware.
hth
Reinhold
On Tue, 29 May 2001, Sergey Konovalov wrote:
> WIC2T + Serial WIC + Voice 2V
>
> Problem: Router cannot see its interfaces (hardware)
> show interfaces- received none
> show version - received none in hardw
Larry,
two things that can cause the delay:
STP - Spanning Tree Protocol
Solution: 'set spantree portfast enable'
(Use it only on end-station ports)
PAgP - Port Aggregation Protocol
Solution: 'set port channel off'
(PAgP is enabled by default on EtherChannel capable links)
HTH
Reinhold
Not quite correct. PortFast does not disable STP. It puts a port initially
into 'Forwarding' state and then watches if loops occur. If for some reason
the port is forced into 'Blocking' state and later needs to return to the
'Forwarding' state, it has to go through the 'Listening' and 'Learning'
p
How is the FastEthernet 0/0 connected to the LAN ? Deferred means that the
frame was discarded due to too many consecutive collisions on the medium.
The router tried to send the frame to the ethernet a few times but it had
no success - collisions always occured and the frame got discarded. Can yo
ing tree is not enabled. No tbeing too familiar with switches, I'm
not sure
> on the effect of PAgP.
>
>
> Reinhold Fischer on 06/12/2001 06:09:51 PM
>
> To: Larry Ogun-Banjo/EN/Kpn-Orange@kpn-orange
> cc: [EMAIL PROTECTED]
> Subject: Re: fao: Catalyst Gurus [7:81
For what OS do you need this thingie ? Assuming you need it for windows
here is something that might fit your needs:
http://www.bttsoftware.co.uk/snmptrap.html
hth
Reinhold
On Mon, 18 Jun 2001, Bob Johnson wrote:
> I need something to log SNMP traps. Something as simple as a Syslog server.
>
Hi,
the problem could be that only process-switched packets get 'seen' by the
debug process. issue 'no ip route-cache' at the interface config. please
report if this solved the problem ...
Greetings
Reinhold
On Tue, 19 Jun 2001, cisco guru wrote:
> Hi all,
> I am trying to see the debug outpu
Have seen it on many (mostly smaller) routers. Its a bug:
> > ## Bug Id : CSCdu60369
> > ## Headline no syslog logging when logging synchronous enabled
> > ## Product c2600 Model
> > ## Component os-logging Duplicate of
> > ## Severity 2 Status M
> > ## Version Found12.0(7)T 12.0(6)S F
hi all,
today i took the multicast and qos exam (640-905). In my opinion it is the
hardest of the three exams to achieve the CCIP/MPLS cert.
For preparation i have used the Ciscopress 'developing ip multicast
networks' book and read up the relevant sections of the Quality of Service
Solutions Co
Stan,
are you seeing the other switch via cdp from both sides of the link ?
I had a similar issue where i could see the other switch via cdp what
fooled me into thinking that there is bidirectional communication possible.
On the other side i saw no cdp neigbor. The link light was fine on both
sid
Hi John,
althought i am not totally sure about this one i will give it a try.
Triggered updates lead to shorter convergence time. During the time that
the network is not convergent it could well be that routing loops can occur
because the routers have a different view of the network.
others cor
The packet counters for incoming packets/sec look not very
reasonable. Especially when relating them to the outgoing
packets/sec. How high is the cpuload on the box ? Is there
a possibility that some kind of attack is going on on the
ethernet interface ? What confuses me a bit is that there are
no
it depends on the layer2 protocol and how the router handles it if it sees
its own packets coming back. I am using loops often to test a line if it
is ok or has any problem. I am not sure how FrameRelay encapsulation
behaves when you loop the line but i think it sounds feasible that it
will not co
Tim,
what network-addresses are used where with what masks ? I have seen
similar problems with FW-1 related to proxy-arp.
Reinhold
On Sat, 15 Dec 2001, Tim Begley wrote:
> Hi - I've come across something strange (strange to me anyway)when
deploying
> a router on lan segment with a checkpoint f
Sorry, you are wrong ;)
the rule defines that you canNOT have more than 5 segments with 4 repeaters
and NO more than 3 segments can be populatet.
hth,
Reinhold
--
Reinhold Fischer
CCNP/SCSA/HP Certified Consultant for Network Management
On Tue, 29 Aug 2000, Hitesh Pathak
/assignments/protocol-numbers
hth
Reinhold
--
Reinhold Fischer
CCNP/SCSA/HP Certified Consultant for Network Management
On Thu, 31 Aug 2000, George Zhang wrote:
> I read the following form Cisco documentation about IPSec:
>
> "IKE uses UDP port 500. The IPSec ESP and AH protocol
--
Reinhold Fischer
CCNP/SCSA/HP Certified Consultant for Network Management
On Thu, 31 Aug 2000, Nova Rich wrote:
> hey guys,
>
> I was wondering how to apply subinterfaces. I have 1 ether port on my router
> (1600) and need 2 links to the switch. One for public IP and the other for
.*.*.* and target as exactly
255.0.0.0.
hth
Reinhold
--
Reinhold Fischer
CCNP/SCSA/HP Certified Consultant for Network Management
On Thu, 31 Aug 2000, Yee, Jason wrote:
> hi,
> anyone knows how to interpret the access-list below :
>
> access-list 101 160.0.0.0 0.255.255.255 255.0
the running routing protocols)
Usually it should be necessary only on serial interfaces to set the
bandwidth to the actual value. As example the bandwidth of a serial inter-
face is by default always configured to 1544 Kbit.
group: please correct me if i got something wrong.
Reinhold
--
Reinhold
on the linux box and you will use proxy-
services (squid, socks5, fwtk) to provide controlled internet access
to the users.
hth
Reinhold
--
Reinhold Fischer
CCNP/SunCSA/HP Certified Consultant for Network Management
On Sat, 9 Sep 2000, Trevor Corness wrote:
> Yes, definately. Don
Michael,
if it is only for lab/learning purpose you can use the 12.0S
images from ftp-eng.cisco.com. They are not supported by cisco,
but work quite well. Use anonymous login and look under /isp
Note: The cisco2500 image does not have too much MPLS features
built in. No problems with the 2600 im
Barry,
not sure what you mean with 'it won't let go of their ip address from the
last site they were at', but maybe this helps you:
Troubleshooting Cisco Catalyst Switches to NIC Compatibility Issues
http://www.cisco.com/warp/public/473/46.html
Regards
Reinhold
On Sat, Nov 02, 2002 at 02:45
Cisco1721 and VWIC-1MFT-E1 (or VWIC-1MFT-G703 if you need unframed mode).
hth
Reinhold
On Mon, Nov 04, 2002 at 06:02:01AM +, Mohannad Khuffash wrote:
> Hello All,
> What is the lowest router series that support the G.703 interface? Is it
> 36xx ?
Message Posted at:
http://www.groupstudy.
Bytes / Bits
MRTG is very accurate - as long as the stuff that gets feeded into it is OK.
hth
Reinhold
On Mon, Nov 04, 2002 at 12:28:34PM +, Firesox wrote:
> Folks,
> I am using MRTG to pull cisco Router's snmp mibs.
> On ehternet interface the graph shows the max speed of 1250.0K which is
Hi Daniel,
counters are seriously broken in 12.0.21S4. Have not seen any counter
problems with 12.0.21S5 so far. This is on 7200 and 7500 routers here.
One bug open at cisco for this issue:
CSCin15495
Symptoms The output counters that are associated with an interface may
remain zero, even tho
John,
Cisco's 25xx series uses the AMD Lance Chip for their 10Mbit
Ethernet Interface. This Chipset does not support full-duplex at all.
Router#show controllers ethernet 0
LANCE unit 0,
^
Have never used a 2516 myself but as far as i know it has a simple 10Mbit
Ethernet Hub built in. Ful
ftp to ftp-eng.cisco.com (anonymous login)
cd /rraszuk/specials
here they are:
-rw-r--r-- 1 23115eng 12940544 Feb 15 2002 c2500-js-l.20oct2001
-rw-r--r-- 1 23115eng 8303380 Feb 15 2002 c2500-p-l.20oct2001
-rw-r--r-- 1 23115eng 7973476 Feb 15 2002 c2500-p-l.t
Not sure what exactly you want to achieve, but here are two options:
- connect a gig-ethernet port of a switch to your gig-ethernet port
of the 7600 and use a 10/100 port on the switch with fixed 10MBit
speed setting
- use traffic shaping as described in the OSM config guide:
http://www.ci
AFAIK there is no special interaction between SRM and HSRP.
You might want to use the 'standby preempt delay ' feature
to be sure that routing protocols have converged before the router
is taking over hsrp active router functionality.
http://www.cisco.com/warp/public/619/hsrpguide4.shtmlT
hth
R
Ed, all,
1. no clue. probably the usual marketing crap.
2. NPE has a single cpu that performs all the tasks.
NSE has a PXF 'coprocessor' that can offload some tasks from the
main CPU and therefore it could perform better in some cases.
see: http://www.cisco.com/warp/public/cc/pd/ifaa
56 matches
Mail list logo