RE: 3550 EMI [7:50103]

2002-07-30 Thread Rik Guyler
My only gripe with the 3550 series is that they once again changed some of the commands to do the same stuff. For example, to upgrade the IOS, the image now resides in a folder in flash and you use the archive command with several possible options. Fallback bridging is another one that really

RE: ADSL - unable to reach URL's [7:50068]

2002-07-29 Thread Rik Guyler
Chances are this is NOT a DNS issue. Try to PING www.cisco.com by name and see if you get name resolution. If you resolve the name to an address then DNS is not at fault here. I believe that your issue is more likely caused by an MTU problem. PPPOE requires 8 bytes of overhead and so your MTU

OT - PPPOE on a PIX [7:50085]

2002-07-29 Thread Rik Guyler
Has anybody had a problem with PPPOE on a PIX 506 running 6.2(1) code? My problem appears to be MTU-related - I can PING all day but HTTP only brings up about a third of the sites I browse. There is a caveat in the docs about MTU dropping to 1492 with PPPOE, which is supposed to happen

RE: Can get it to work (Pix 515 behind cable modem [7:49845]

2002-07-27 Thread Rik Guyler
This reply is a lng one! Please allow me to clear up a couple of misconceptions I have read on this thread. First, a while it is true a PIX blocks everything by default, this only applies to inbound traffic initiated from the outside. Outbound sessions initiated from the inside are all

RE: Quick Vlan question [7:49533]

2002-07-24 Thread Rik Guyler
There are some router models that have 10Mb interfaces that support trunking (Dot1Q). What differentiates them is the IOS feature set. You need IP+ on some of the older models whereas most of the newer models have 100Mb interfaces and support trunking with just the IP feature set. If your

RE: Security hazard?? [7:45731]

2002-06-04 Thread Rik Guyler
Pete, bear in mind that this document is 2 years old. The IOS version on the switch was 11.2. Anybody care to speculate on how much has changed since 11.2? How about the changes in Dot1Q since then? Nonetheless, I don't get a warm and fuzzy feeling with separating external and internal

RE: VLANS [7:42932]

2002-05-01 Thread Rik Guyler
Well, you can, just like you can put 2 physical segments in the same logical (IP) network. Of course, the question begs to be asked, why? as this doesn't give you anything. You won't be able to do much with it except bridge the traffic and then you kill the entire rationale behind VLANs. After

RE: Trunking over Aironet bridge? [7:42833]

2002-04-29 Thread Rik Guyler
I agree. Change the MTU on the bridges. I have a customer with 5 remote sites connected via 802.11b and trunking across all 5 and I have to increase the MTU. What I would love to see is an update to the Aironet code that supports the actual trunking header so my bridge management interfaces

RE: Gigabit GBIC for 3550 [7:42680]

2002-04-26 Thread Rik Guyler
Geez...all you guys had to do was ask! ;-} Rik -Original Message- From: Chuck [mailto:[EMAIL PROTECTED]] Sent: Friday, April 26, 2002 5:44 PM To: [EMAIL PROTECTED] Subject: Re: Gigabit GBIC for 3550 [7:42680] do great minds think alike, or what ;- ( see my response to the same

RE: SSH RSA key [7:40297]

2002-04-03 Thread Rik Guyler
Don't forget the ca save all command to save the key once you generate it. Otherwise it will go away when you reboot the PIX. Rik -Original Message- From: Mark Odette II [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 03, 2002 2:21 AM To: [EMAIL PROTECTED] Subject: RE: SSH RSA key

RE: Radius and Win2K IAS [7:40336]

2002-04-03 Thread Rik Guyler
James, I have done this with NT 4.0 and doubt that it really differs much with Windows 2000. In my opinion, the MS RADIUS product is very basic but if all you want is authentication then it should work just fine for you, especially as it's free and lightweight. Different devices are setup in a

RE: PIX VS CheckPoint [7:40136]

2002-04-02 Thread Rik Guyler
One point I believe should be mentioned is the different levels of awareness each product brings to the table. One of the strengths of the PIX becomes its primary weakness: the lack of true integrated application-level awareness. While this lack makes the PIX much faster than say Checkpoint,

RE: root switch [7:39975]

2002-04-01 Thread Rik Guyler
I agree...always enter a specific value. Yonghai, there is one thing I want to clear up after reading your posts. MAC address only comes into the root election process AFTER the bridge ID selection process. Since the default bridge ID on a Cisco switch will always be the same value, MAC

RE: If it's a 2611, you're out of luck [7:39788]

2002-03-31 Thread Rik Guyler
PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Rik Guyler Sent: Thursday, March 28, 2002 5:44 PM To: [EMAIL PROTECTED] Subject: RE: If it's a 2611, you're out of luck [7:39788] Another bit of good info to know: Traditionally, the 1700 series would not support trunking, either ISL or Dot1Q

RE: AS5301 modem question [7:39917]

2002-03-31 Thread Rik Guyler
Michael, I have not worked on a 5301, only a 5300 so I will tell you what I know and maybe it will carry over. Since nobody else has any ideas, maybe this will help. In a 5300, the T1 card is a different card than the modem card(s). You said this is a quad T1 card so you should see 4 T1 ports

RE: If it's a 2611, you're out of luck [7:39788]

2002-03-28 Thread Rik Guyler
Another bit of good info to know: Traditionally, the 1700 series would not support trunking, either ISL or Dot1Q. That includes both the 1720 and 1750. In these cases, you had to purchase a 2600 with IP Plus, which is an expensive proposition to avoid the necessity of 2 or more E/FE

RE: Designated Port/Switch and Root Port?? [7:39811]

2002-03-28 Thread Rik Guyler
I'll try to explain this: Think of a root port as the closest port to the root bridge on a given BRIDGE. Think of a designated port as the closest port to the root bridge on a given SEGMENT. This is the port used by all bridges on a given segment to get to the ROOT. Consider the following

RE: Gigastack Etherchannel [7:39033]

2002-03-25 Thread Rik Guyler
Yes and no. Gigastacks are FD when only one port is used. When you truly stack with these GBICs, meaning one port is used for inbound and the other for outbound, a show int will reveal a HD connection. As you notice in ole's output, only one port is in use. GigaStack module(0.2) in GBIC slot.

RE: Gigastack Etherchannel [7:39033]

2002-03-25 Thread Rik Guyler
- From: Ole Drews Jensen [mailto:[EMAIL PROTECTED]] Sent: Monday, March 25, 2002 8:43 PM To: 'Rik Guyler'; [EMAIL PROTECTED] Subject: RE: Gigastack Etherchannel [7:39033] Hi Rik, You're correct, and if you continue to read the rest of the e-mails regarding this question, another question pop's up

RE: CCIE#8903 [7:37490]

2002-03-06 Thread Rik Guyler
George, you are an inspiration to us all. Thanks for the description of your journey and congratulations! Rik -Original Message- From: George Zhang [mailto:[EMAIL PROTECTED]] Sent: Wednesday, March 06, 2002 6:01 PM To: [EMAIL PROTECTED] Subject: CCIE#8903 [7:37490] All, The title

RE: Catalyst 3508G XL , 2950T-24 [7:37098]

2002-03-04 Thread Rik Guyler
You will need the updated IOS for this GBIC. Being a newer GBIC, the older IOS won't recognize it so run the upgrade and it will work. To confirm this, type sh int g0/1 (g0/2, etc..) and the output will tell you if the GBIC is recognized or not. Rik -Original Message- From: Chuck

RE: Catalyst 3508G XL , 2950T-24 [7:37098]

2002-03-04 Thread Rik Guyler
That's not good advice. An LX GBIC uses a laser transmitter, which is powerful enough to burn a hole in your retina as a coworker of mine found out. Besides, this is a copper GBIC so no light to see. 12.0(5.3) is a new enough IOS to recognize the copper GBIC so this version will work on all of

RE: PIX PAT Problem!! Urgent [7:37052]

2002-03-02 Thread Rik Guyler
Yes but there are caveats. You cannot do an all inclusive static mapping to a PAT interface but you can redirect certain traffic based on port to specific inside hosts. For example, if you only have a single outside address and you are using it on your outside interface, not only can you use

RE: PIX Firewall authentication [7:35947]

2002-02-20 Thread Rik Guyler
Another option would be Websense for PIX. This product will not only authenticate the user but provide URL filtering and detailed reporting, which the Proxy box doesn't do too well. I install this product frequently and hear nothing but good about it from our customers. Check out

RE: VTP and gigastack connectors [7:35971]

2002-02-20 Thread Rik Guyler
I have seen this before. I don't remember the IOS versions in question but it was an IOS bug. Try upgrading the IOS on the 35xx switches to the latest version. Also, VTP domain is case sensitive, so when you set it on the client, make sure you enter it correctly. Rik -Original

RE: Blocking ICQ and other Instant Messengers [7:35976]

2002-02-20 Thread Rik Guyler
I wouldn't say this covers all of them but the most widely used IM apps. This is used on a PIX and applied to the inside interface so modify as necessary to fit your needs. access-list inside deny tcp any any eq 1863 access-list inside deny tcp any any eq 5000 access-list inside deny tcp any any

RE: VOIP Certification [7:35879]

2002-02-19 Thread Rik Guyler
I took the CIPT test and thought it not too difficult. This exam covers primarily Call Manager and general voice technology. Fortunately for you there are finally resources being published for Call Manager but hands-on with the product will go a long way. CCO offers a demo version you can

RE: Easy ways to pick up a few extra minutes on th [7:35580]

2002-02-17 Thread Rik Guyler
A proctor graced our presence at my last ASET meeting and I asked him this very question about which terminal emulator is used in the lab (I prefer TeraTerm myself and am accustomed to the shortcuts). His response was that they use Hyper Terminal exclusively so everybody better get to know it

RE: Easy ways to pick up a few extra minutes on th [7:35580]

2002-02-17 Thread Rik Guyler
You will get Windows boxes with the MS telnet client and Hyper Terminal. Rik -Original Message- From: Ozzie Sutcliffe [mailto:[EMAIL PROTECTED]] Sent: Saturday, February 16, 2002 12:08 PM To: [EMAIL PROTECTED] Subject: Re: Easy ways to pick up a few extra minutes on th [7:35580] So

RE: Flash upgrade disaster [7:35184]

2002-02-12 Thread Rik Guyler
Did you format the new flash? I've had issues with corruption adding flash while existing flash is still installed. Try to boot to rommon mode and format the flash. You should be able to do this with both sticks installed without too much problem. Then install IOS, build the config, etc. Rik

RE: VOIP for CCIE [7:34849]

2002-02-08 Thread Rik Guyler
I considered those for my lab as well but Brad Ellis mentioned that they won't run Enterprise IOS, which limits their value in your lab. Rik -Original Message- From: Steven A. Ridder [mailto:[EMAIL PROTECTED]] Sent: Friday, February 08, 2002 10:51 AM To: [EMAIL PROTECTED] Subject: Re:

RE: 3DES [7:34754]

2002-02-07 Thread Rik Guyler
Unless this is a brand new change, the 515R certainly does support 3DES as I have installed it many times on this firewall. The DES license is the only FREE license but you can pay for the 3DES. The difference between the R and U versions has to do primarily with interfaces (R=3, U=6) and

RE: GBIC's for single mode fiber [7:34699]

2002-02-06 Thread Rik Guyler
I can tell you that the last I knew, there were 3 companies manufacturing GBICs for Cisco. You can buy from them direct as my company has done on occasion. I was told that the difference in price was incredible but there is a minimum order required. Unfortunately I don't know where we bought

RE: Pix and vlan [7:34663]

2002-02-06 Thread Rik Guyler
Well, you're close. The tag will get removed if the VLAN information is necessary in a given location (switch). In other words, the tag is only permanently removed by the last switch to touch it before the frame actually arrives at the final destination. If a given switch is not the last

RE: VLan Ooops Part 2 [7:34687]

2002-02-06 Thread Rik Guyler
You will also need IP-Plus IOS for the trunking feature on the 2600. Rik -Original Message- From: Erick B. [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 06, 2002 8:19 PM To: [EMAIL PROTECTED] Subject: Re: VLan Ooops Part 2 [7:34687] 802.1q (dot1q) works on 10meg interfaces. I'm

RE: PIX activation key [7:34450]

2002-02-05 Thread Rik Guyler
Well, I've seen an R version and a U version but never a UR version. I have always been under the assumption that they were mutually exclusive. As for the lack of an activation key, that is odd. What is the current version of the OS? Have you tried to run an upgrade? When you apply for a

RE: 4000 Series switch [7:34449]

2002-02-05 Thread Rik Guyler
The 4000 uses a very similar CLI to the 5000. The 4000 series is much newer so some of the features are different plus the 5000 was considered a core switch and the 4000 a closet switch. However, the 4000 is coming out of the closet and some cool new features are being released such as Layer 3

RE: info on blocking aol im [7:34459]

2002-02-05 Thread Rik Guyler
Block both TCP and UDP port 5190. Check it out: http://www.chebucto.ns.ca/~rakerman/port-table.html Rik -Original Message- From: Walls Matthew [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 05, 2002 10:13 AM To: [EMAIL PROTECTED] Subject: info on blocking aol im [7:34459]

RE: Duplicates [7:33955]

2002-01-31 Thread Rik Guyler
Tom, I had this issue a few weeks ago and I tracked it down to Outlook inbox rules. I deleted my rules and recreated them and now I only receive single posts. Rik -Original Message- From: Tom Lisa [mailto:[EMAIL PROTECTED]] Sent: Thursday, January 31, 2002 7:23 PM To: [EMAIL PROTECTED]

RE: ISDN simulator [7:33841]

2002-01-31 Thread Rik Guyler
Shameless plug? Absolutely! No shame in how Brad does business. :-} Maybe he does have a financial interest but who cares? I have learned over the years to listen to him...he is usually right. His simulator is as inexpensive as you will find and I know he wouldn't offer it if it didn't do

RE: 6509 roaming disconnects part2 [7:32449]

2002-01-18 Thread Rik Guyler
Larry, you haven't given us much but maybe you don't have much. One thing that may help ease the symptoms is to turn on portfast on the ports the servers are connected. When the port does flap, it won't take so long for it to begin forwarding again. You didn't mention what type of cards the

RE: Dose PBX has a E1 interface? [7:32404]

2002-01-18 Thread Rik Guyler
Most PBXs are modular, at least to a degree and so you would most likely have the choice to add a linecard to support E1 circuits. Rik -Original Message- From: Chuck Larrieu [mailto:[EMAIL PROTECTED]] Sent: Friday, January 18, 2002 11:02 AM To: [EMAIL PROTECTED] Subject: Re: Dose PBX

Multiple posts [7:32204]

2002-01-16 Thread Rik Guyler
A few days ago I started receiving duplicate emails from the Groupstudy. Now I am receiving triplicate emails. Anyone else experiencing this? --- Rik Guyler Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=32204t=32204 -- FAQ

RE: Autosense this ... (add to your knowledgebase) [7:30446]

2001-12-29 Thread Rik Guyler
It's been more than once when I've encountered autonegotiation/autosense issues between a Cisco router and Cisco switch. I've even seen problems when both interfaces were 10/100 and both hard-coded to 100/full and the link wouldn't come up. This may a chink in the Cisco armor as I rarely

RE: Lab Attempt #2 - no go :- [7:28142]

2001-12-05 Thread Rik Guyler
Chuck, I can read the frustration in your post...I feel your pain. I have to say I am surprised to hear that your experience with the new lab was not a good one. If there is anybody I would say that about, it is you. I hope you are planning a vacation from Cisco. Certainly you are tired. A

RE: Ohio [7:26942]

2001-11-20 Thread Rik Guyler
Dayton Rik -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Tuesday, November 20, 2001 6:04 PM To: [EMAIL PROTECTED] Subject: Ohio [7:26942] I would like to know if there are any user on this board from Central Ohio. Message Posted at:

RE: CCIE#8387 [7:26309]

2001-11-14 Thread Rik Guyler
Dude, you are SOOO the man! Congrats! Rik -Original Message- From: Nigel Taylor [mailto:[EMAIL PROTECTED]] Sent: Wednesday, November 14, 2001 7:55 PM To: [EMAIL PROTECTED] Subject: CCIE#8387 [7:26309] Well as it would turn out it's my turn to write that awesome email... I just got

RE: 2 sets of Gigabit Ethernet Channels. [7:26317]

2001-11-14 Thread Rik Guyler
Sure it's possible. No problemo. This is no different than connecting the Cats together via single Gig links. Rik -Original Message- From: Washington Rico [mailto:[EMAIL PROTECTED]] Sent: Wednesday, November 14, 2001 9:30 PM To: [EMAIL PROTECTED] Subject: 2 sets of Gigabit Ethernet

RE: Convert Voice T1 to Fram-Relay T1? [7:25063]

2001-11-02 Thread Rik Guyler
Yes, but not by you. If the Voice provider is the same as the FR provider, then the T1 could possibly be reprovisioned for a FR data circuit. In this case, however, I would think most providers would prefer to just run another circuit into your facility and then turn off the old one. Rik

RE: MAC address and VLANs [7:23950]

2001-10-24 Thread Rik Guyler
Priscilla, I'm going to open my mouth wide in preparation for my size 11 foot. while I agree with your core message, I tend to believe that you may be looking at a typical modern network through rose colored glasses. For example, I have been working with 3 small/medium (700-1000+ hosts) sized

RE: help with troubleshooting Cisco VPN connection [7:23695]

2001-10-23 Thread Rik Guyler
Using a different IP subnet is the way to do it. The PIX treats this like a virtual interface and has the intelligence built in to forward traffic between the inside and the VPN address range. Looking at your config, I agree with removing the conduit statement but I don't believe that is

RE: CCIE written exam format [7:23970]

2001-10-23 Thread Rik Guyler
Yes to both. In the future, please check the archives at www.groupstudy.com for the answers to such questions - they get asked many times over on a regular basis. Thanks, Rik -Original Message- From: juno vtv [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 23, 2001 9:30 PM To:

RE: fast switching [7:23969]

2001-10-23 Thread Rik Guyler
Gosh Jenny, I don't have a clue but in the past I've had to reboot equipment at times to make a few rare changes take full effect so maybe you're correct. How much pain is involved in rebooting it? Rik -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent:

RE: GBIC: WS-G5484 / WS-G5486 [7:22675]

2001-10-21 Thread Rik Guyler
-Original Message- From: Ole Drews Jensen [mailto:[EMAIL PROTECTED]] Sent: Thursday, October 11, 2001 9:14 AM To: 'Rik Guyler'; [EMAIL PROTECTED] Subject: RE: GBIC: WS-G5484 / WS-G5486 [7:22675] Rik, I appologize if this question is terribly stupid, but I have zero experience with fiber

RE: Word of Caution [7:23363]

2001-10-21 Thread Rik Guyler
While I don't judge people by their mistakes, I do tend to judge them by how they correct them. Was it Debbie's fault your systems went down? No. I don't pretend to live in a world where malfunctions don't happen, but when your systems take a crap you should be ready to deal with the fallout.

RE: route cache? [7:22262]

2001-10-05 Thread Rik Guyler
I agree with the pretty much always except when you want to load balance over multiple paths. When multiple paths exist, fast switching moves data on a per-destination basis and not a per-packet basis as process switching does. Given different amounts of data will most likely be sent to

RE: Cisco PIX Websense (Accounting) ? [7:21850]

2001-10-04 Thread Rik Guyler
No. A quick look through the documentation reveals that bytes transferred is not supported with the PIX. Rik -Original Message- From: Hans Schimek [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 03, 2001 10:50 AM To: [EMAIL PROTECTED] Subject: Cisco PIX Websense (Accounting) ?

RE: guidance needed for CCIE written exam [7:21807]

2001-10-04 Thread Rik Guyler
I like Bruce's book - coverage of a very broad range of technologies. If your only goal is to pass a test then this book may be all you really need. If, however, yopu desire to learn how things work, then you will need to supplement it. I suggest using Kennedy Clark's CCIE Switching book and of

RE: CID - WAN switching design resource [7:21810]

2001-10-03 Thread Rik Guyler
Check the archives on www.groupstudy.com Some time ago, Chuck Larrieu posted a CCO link for the Stratacom stuff you might need. Rik -Original Message- From: Donny Mateo [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 03, 2001 3:52 AM To: [EMAIL PROTECTED] Subject: CID - WAN

RE: Cat 6000 [7:21845]

2001-10-03 Thread Rik Guyler
Strange behavior indeed! I don't know if it's the same thing, but an old, well-known bug with NT/Win2k and Catalysts is very similar. By connecting an NT/Win2k serial port to the console port of a Cat when the PC is booting will reset or freeze the switch. I have witnessed (in other words

RE: T1 install; line protocol going down and up every 30 [7:21955]

2001-10-03 Thread Rik Guyler
In my area, telcos always provide the clock source. I have never had to provide any form of clocking whatsoever. I am curious what type of router is on the other side. If it's not Cisco, are you running PPP? If you had a protocol mismatch, I wouldn't think layer 2 would even limp to up for 30

RE: PIX 515 firewall sample config .... [7:20654]

2001-09-21 Thread Rik Guyler
You have to instal the HTML content. The PDM (PIX Device Manager) is a separate install from the OS. --- Rik Guyler -Original Message- From: Kevin McIntyre [mailto:[EMAIL PROTECTED]] Sent: Friday, September 21, 2001 7:48 PM To: [EMAIL PROTECTED] Subject: Re: PIX 515 firewall sample

RE: Alert: Some sort of IIS worm seems to be propagating [7:20388]

2001-09-19 Thread Rik Guyler
impressions. --- Rik Guyler -Original Message- From: Brad Ellis [mailto:[EMAIL PROTECTED]] Sent: Wednesday, September 19, 2001 2:30 AM To: [EMAIL PROTECTED] Subject: Re: Alert: Some sort of IIS worm seems to be propagating [7:20366] John Kaberna, ([EMAIL PROTECTED]), sent me the following

RE: Dial in/Dial Out modem bank [7:17929]

2001-08-30 Thread Rik Guyler
. These both can provide this type of access. In my office, for engineers providing remote dialup support, we use a 2509 with an octal cable and external modems. Works well and is a fraction of the cost of an AS box. Good luck! --- Rik Guyler -Original Message- From: Brian Whalen [mailto

RE: Connect 6509 with CONSOLE [7:17983]

2001-08-30 Thread Rik Guyler
Hmm...I don't know what the little hole is but accessing the console on a 6509 is just like any other device. Set your stop bits to 1 and give that a try. 1 is the default setting for Cisco consoles. Remember: 9600, 8, none, 1 --- Rik Guyler -Original Message- From: Thomas N. [mailto

RE: Adding NIC to the PIX ?? [7:17691]

2001-08-29 Thread Rik Guyler
cards cannot be forced into promiscuous mode. --- Rik Guyler -Original Message- From: Ed Horley [mailto:[EMAIL PROTECTED]] Sent: Wednesday, August 29, 2001 12:09 PM To: [EMAIL PROTECTED] Subject: Re: Adding NIC to the PIX ?? [7:17691] Here is the link for the hardware portion: http

RE: Work-related ACL problem [7:17695]

2001-08-29 Thread Rik Guyler
to the 172.0.0 network as well. In this case it's not a big deal but if you use several dozen or hundred access lists, having unnecessary extras may add noticeable overhead. --- Rik Guyler -Original Message- From: ron [mailto:[EMAIL PROTECTED]] Sent: Wednesday, August 29, 2001 10:09 PM

RE: vpn through pix [7:17782]

2001-08-29 Thread Rik Guyler
Phil, can you elaborate on the whereabouts of this info? A link maybe? Thanks --- Rik Guyler -Original Message- From: Circusnuts [mailto:[EMAIL PROTECTED]] Sent: Wednesday, August 29, 2001 10:40 PM To: [EMAIL PROTECTED] Subject: Re: vpn through pix [7:17782] If you have the time

RE: What's the diameter of your switched network? [7:17489]

2001-08-28 Thread Rik Guyler
Of course, how often is the root physically in the center? ;-} --- Rik Guyler -Original Message- From: Gareth Hinton [mailto:[EMAIL PROTECTED]] Sent: Tuesday, August 28, 2001 7:28 PM To: [EMAIL PROTECTED] Subject: Re: What's the diameter of your switched network? [7:17489] Always

RE: VPN to PIX using Win2000 or Millennium?? [7:16452]

2001-08-18 Thread Rik Guyler
to be that the PPTP configs for the PIX on CCO were flawed. Maybe this is still the same, maybe not. --- Rik Guyler -Original Message- From: Andy [mailto:[EMAIL PROTECTED]] Sent: Saturday, August 18, 2001 6:48 AM To: [EMAIL PROTECTED] Subject: VPN to PIX using Win2000 or Millennium?? [7:16452] Hi Does

RE: Thanks to all who have contributed... [7:15994]

2001-08-14 Thread Rik Guyler
Chuck, that's an excellent compilation of lab advice! I notice that most of the esteemed contributors had common threads to offer, which I'll surely heed when my time comes. Are you getting close to taking another stab at the lab soon? I know I'd like to get a 4-digit number... ;-} --- Rik

RE: PIX Question [7:15518]

2001-08-09 Thread Rik Guyler
versions of PIX support port redirection, but again, I haven't confirmed this. Anyway, check them out. --- Rik Guyler -Original Message- From: Bruce Williams [mailto:[EMAIL PROTECTED]] Sent: Thursday, August 09, 2001 3:35 PM To: [EMAIL PROTECTED] Subject: PIX Question [7:15518] I have

RE: Pix static NAT error UPDATE [7:15169]

2001-08-08 Thread Rik Guyler
you can't add a static without ports, I would suspect corruption, possibly the image, flash, or whatever. Try imaging the box with a fresh download of the PIXOS. --- Rik Guyler -Original Message- From: Patrick Ramsey [mailto:[EMAIL PROTECTED]] Sent: Wednesday, August 08, 2001 7:22 PM

RE: Can't ping outside of PIX [7:15205]---- FIXED [7:15205]

2001-08-08 Thread Rik Guyler
the xlate timeout to something a little more reasonable than 24 hours. Something like 30 or 60 minutes or even 10 minutes (my choice). Keeping all of those translations around just ties up memory. --- Rik Guyler -Original Message- From: Pierre-Alex [mailto:[EMAIL PROTECTED]] Sent: Wednesday

RE: Cisco Call Manager [7:15402]

2001-08-08 Thread Rik Guyler
If you have a CCO account with the correct permissions, you can download it. Otherwise, talk to your local Cisco Account Manager for a demo or NFR version. --- Rik Guyler -Original Message- From: Rick Holden [mailto:[EMAIL PROTECTED]] Sent: Wednesday, August 08, 2001 9:04 PM To: [EMAIL

RE: CCDA after CCNP, How tough???? [7:10960]

2001-07-10 Thread Rik Guyler
. --- Rik Guyler -Original Message- From: Mohamed El Komy [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 10, 2001 5:51 AM To: [EMAIL PROTECTED] Subject: Re: CCDA after CCNP, How tough [7:10960] I also have same situation.I just finished my CCNP and i still whether it worth to go through

RE: CCO questions [7:11275]

2001-07-08 Thread Rik Guyler
, the way to download software is to use the customer's account that was setup with their SmartNet contract or a special download access code provided by TAC. --- Rik Guyler -Original Message- From: Sam Deckert [mailto:[EMAIL PROTECTED]] Sent: Sunday, July 08, 2001 1:00 AM To: [EMAIL

RE: PIX recommendations !!! [7:11336]

2001-07-08 Thread Rik Guyler
. I like John's overall solution the best but if the budget is limited, stay with the Proxy box and integrate it into the PIX solution. If you want content filtering, then go with --- Rik Guyler -Original Message- From: John Hardman [mailto:[EMAIL PROTECTED]] Sent: Sunday, July 08, 2001

RE: CCO questions [7:11275]

2001-07-07 Thread Rik Guyler
can't download any software with this account but you will gain access to the private documents, resources, etc. --- Rik Guyler -Original Message- From: Michael L. Williams [mailto:[EMAIL PROTECTED]] Sent: Saturday, July 07, 2001 9:14 PM To: [EMAIL PROTECTED] Subject: Re: CCO questions [7

RE: PIX authentication [7:11265]

2001-07-07 Thread Rik Guyler
server. It comes as part of the IIS option pack for NT 4.0. I don't know where it's setup on Win2k but I'm sure it's there somewhere as well. With this, you could setup a backup RADIUS server. --- Rik Guyler -Original Message- From: Jim Bond [mailto:[EMAIL PROTECTED]] Sent: Saturday

RE: CCO questions [7:11275]

2001-07-07 Thread Rik Guyler
don't know what it gets you but it exists. Before anybody asks, I don't have a clue how to get it, what it gets you, etc. I just know it's available. How do these things get started...? ;-} --- Rik Guyler -Original Message- From: Chuck Larrieu [mailto:[EMAIL PROTECTED]] Sent: Saturday

OT: 3000 Console cable help [7:11143]

2001-07-05 Thread Rik Guyler
Shorted to pin 5 5 CTS Shorted to pin 4 6 Shorted to pin 8Output 7 GND - 8 CD Output 20 DTR Input --- Rik Guyler

RE: Still having problems with Inter-vlan routing! Help! [7:10945]

2001-07-03 Thread Rik Guyler
that, it sounds like you did most things right. If you stil can't get it down, you might try posting your configs so the esteemed group members may check 'em out! --- Rik Guyler Ciscofucious say: If you haven't checked the archives first, don't ask! -Original Message- From: cisco guru

RE: access servers? [7:10449]

2001-06-29 Thread Rik Guyler
These are generally remote access servers. Some call them RAS, some call them NAS (network AS) but they're all the same thing for the most part. In short, they provide access to the LAN via dial-up technology. These boxes usually have digital modem cards (the better ones do anyway), which

RE: Strange situation with NAT and telnet [7:10387]

2001-06-29 Thread Rik Guyler
Is this an Internet router or just an internal router running translation? Unless you have static translates setup, NAT overload (PAT) will most likely not allow inbound connections as it tracks ports for outbound and established connections, not inbound connections. This is how you are able to

RE: back-to-back [7:10469]

2001-06-29 Thread Rik Guyler
That's because the crossover for a T1 is different than 56k. I believe that the crossover you need is 1,2 - 7,8 but I'm not sure if my memory is working all that well or not. Maybe someone else can confirm or deny this for us. Or, if you really want to score points with the list, search on

RE: T1 concept? [7:10300]

2001-06-28 Thread Rik Guyler
Well, it's not necessarily true that a T1 circuit is a frame circuit. A T1 is simply the layer 1 technology. In other words, just a piece of wire more or less. Frame relay on the other hand is a layer 2 technology. It will typically run on T1 layer 1 technology but not always. There is a 56k

RE: supervisor engine [7:9902]

2001-06-25 Thread Rik Guyler
The ports on a sup engine are like any other comparable port - they can be trunked. Rik -Original Message- From: Joe Morabito [mailto:[EMAIL PROTECTED]] Sent: Monday, June 25, 2001 10:45 PM To: [EMAIL PROTECTED] Subject: supervisor engine [7:9902] Does anyone know if you can use the

RE: supervisor engine [7:9902]

2001-06-25 Thread Rik Guyler
Ummm...this is describing etherchannel, but you can do that also. Rik -Original Message- From: jackxu [mailto:[EMAIL PROTECTED]] Sent: Monday, June 25, 2001 11:10 PM To: [EMAIL PROTECTED] Subject: Re: supervisor engine [7:9902] certainly u can,cisco 6509's supervisor engine provide

RE: Setting up Sub-interfaces on serial interface for Frame [7:9704]

2001-06-24 Thread Rik Guyler
Well, since you say you have everything else accounted for, have you tried rebooting the router? Subinterfaces and loopbacks tend to be rather troublesome once setup. Deleting and changing these virtual interfaces typically requires a reboot for the changes to take effect completely. You might

RE: Linux Console program (Hypterminal equivlant)? [7:7188]

2001-06-04 Thread Rik Guyler
Teraterm Pro is among the favorites of this group, myself included. Plus it's free. Just search on Google for teraterm and you'll get to the site easily. Rik -Original Message- From: Stephen Dunn [mailto:[EMAIL PROTECTED]] Sent: Monday, June 04, 2001 9:51 PM To:

RE: Passed CIT - Now a CCNP!! [7:6725]

2001-06-01 Thread Rik Guyler
Dude, great job! -Original Message- From: Andrew Larkins [mailto:[EMAIL PROTECTED]] Sent: Friday, June 01, 2001 3:14 AM To: [EMAIL PROTECTED] Subject: Passed CIT - Now a CCNP!! [7:6725] I passed my final exam yesterday - CIT with a score of 919. At last I have my CCNP. Many thanks to

RE: PASSED: CCNP SWITCHING 2.0 (BCMSN) [7:6501]

2001-05-30 Thread Rik Guyler
Great job! -Original Message- From: Hire, Ejay [mailto:[EMAIL PROTECTED]] Sent: Wednesday, May 30, 2001 3:50 PM To: [EMAIL PROTECTED] Subject: PASSED: CCNP SWITCHING 2.0 (BCMSN) [7:6501] Passed today at 3:00 with a score of 879. 64 questions in 30 minutes. Scoring Range 300-1000,

RE: Help on Cisco 4000 Switch [7:6191]

2001-05-29 Thread Rik Guyler
Friend, eh?!? Oh the humanity... ;-} Well, you could set a static entry but why? The ARP table is designed to be dynamic so that it doesn't grow to a large size and really create additional overhead. Remember, before ARP does its broadcast search, the switch will check the ARP cache. The

RE: Passed CCIE Written [7:6113]

2001-05-28 Thread Rik Guyler
Congrats dude! Rik -Original Message- From: thangavel vishnukumar mudaliar [mailto:[EMAIL PROTECTED]] Sent: Monday, May 28, 2001 10:47 AM To: [EMAIL PROTECTED] Subject: Passed CCIE Written [7:6113] Hi all, I passed CCIE written,Just narrowly escaped.Anyhow cleared it.Now left with

RE: What do interVLAN routing and Layer 3 switching mean [7:6124]

2001-05-28 Thread Rik Guyler
I think that what you have described is multi-layer switching. As Howard has mentioned in past posts, L3S is simply a marketing term as is wire-speed switching. Layer 3 Switching is simply a line card, typically in a chassis-based system, that can make routing decisions (layer 3) using

RE: ISL and MTU [7:6059]

2001-05-28 Thread Rik Guyler
Well George, since nobody else answered, I'll help here. Your logic is a little backwards here. by lowering your MTU, you may remove the label of baby giants on some of your data (now maybe they'll be giants), but that is all. Actually, by doing this, you will cause (at least in theory)

Re: what's the RSM utilization and what slow down network?

2001-04-09 Thread Rik Guyler
It is considered good form to leave VLAN1 only for management, although in small networks, it may not be as "critical". In a large network, however, doing this becomes very important. Here's some reasons why: 1) Keeps most/all SNMP traffic off of data VLANs 2) Adds an extra level of security,

RE: Performance Comparision between Linux OS Firewall and Cisco PIX 525

2001-03-26 Thread Rik Guyler
But that just proves my point - you *can't* setup DNS server on a PIX, so it becomes a non-issue with a PIX. Besides, I think everybody I know has done something that they know not to be the best thing but do it because it is a quick and easy solution. Don't get me wrong - I like Linux. The

certificationzone.com

2001-02-13 Thread Rik Guyler
I'm having problems getting to the certificationzone website. Anybody else experiencing this? Rik , This mail was processed by Mail essentials for Exchange/SMTP, the email security management gateway. Mail essentials adds content checking, email encryption, anti spam, anti virus,

  1   2   >