Re: Classful Prefix-list [7:39113]

2002-03-22 Thread Rob Webber
networks (0.0.0.0/8 to 127.0.0.0/8). Same with the 128.0.0.0/2 - that means make sure the first two bits are 10, but then ignore everything else. So this includes all class B addresses - from 128.0.0.0 to 191.255.255.255. Rob. ""Rob Webber"" wrote in message [EMAIL PROTECTED]&qu

Re: Classful Prefix-list [7:39113]

2002-03-22 Thread Rob Webber
I believe this will do what you are looking for. I did a little testing and it seemed to work well: ip prefix-list classful seq 5 permit 0.0.0.0/1 ge 8 le 8 ip prefix-list classful seq 10 permit 128.0.0.0/2 ge 16 le 16 ip prefix-list classful seq 15 permit 192.0.0.0/3 ge 24 le 24 Hope that helps

Re: Appreciate Your Expertise On This Strange ARP Problem [7:38828]

2002-03-19 Thread Rob Webber
Alec, This is quite an interesting scenario you ran into. I think I can explain what happened. As you mentioned Cisco enables proxy-arp by default. Usually this is a good thing - in this case it was the cause of the problems. Before the change when a 10.67.7.* DHCP client wanted to connect to a

Re: cisco switches (with MSFC) arp timer question [7:38635]

2002-03-18 Thread Rob Webber
For step 3, it depends whether the link between core 1 and core 2 is a routed link or a trunk (ISL or 802.1Q) link. If its a routed link (such as VLAN 3, with all VLANs running OSPF), core 1 will route the packet to core 2 and core 2 will route the packet to client 2. For step 4, client 2 will no

Re: Is this possible? [7:38098]

2002-03-15 Thread Rob Webber
As far as getting the PIX to prompt for authentication, it can be done, however it needs to be done by a browser (since the browser has the ability to "pop up" a username/password box, but Citrix doesn't have this capability). You can simply have them go to a static web page that you create which

Re: BGP using AS_PATH attribute [7:37749]

2002-03-11 Thread Rob Webber
I haven't seen the lab, either, but how did you perform the filtering of AS65000? When I read your post I was thinking of the neighbor remove-private-as command. That should allow R3's loopback network to propagate, just that R1 won't see the 65000 AS. Feel free to post your configs and anything e

Re: blocking spanning tre ports [7:37663]

2002-03-11 Thread Rob Webber
If I understand your topology correctly, switches 3 and 4 share an Ethernet segment. If I remember Spanning Tree correctly, one of these two will be the "designated bridge" for that segment. That bridge will be forwarding packets toward the root. All other bridges on that segment (in this case, th

Re: MPLS in the Enterprise [7:36670]

2002-02-27 Thread Rob Webber
I see your point on security, but I don't completely agree. Your current Frame Relay network is only as secure as your carrier. If someone at your carrier maps a PVC between you and company X, real traffic can flow (assuming your router picks it up and places on the physical interface, which it li

Re: Where is Bruce Caslow ECP1 Class? [7:36501]

2002-02-26 Thread Rob Webber
Oops - apparently the link did not come through for some reason. It is: www.netmasterclass.net/nmc/ Rob. ""Will K."" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Does anyone know where information about this class can be found? Thanks. Message Posted at: http://www.group

Re: Where is Bruce Caslow ECP1 Class? [7:36501]

2002-02-26 Thread Rob Webber
Now called "RS-NMC-1 (Routing and Switching Net Master Class)" Rob. ""Will K."" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Does anyone know where information about this class can be found? Thanks. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=36513&t=

Re: TWO ISP AND ONE FAILURE [7:36371]

2002-02-25 Thread Rob Webber
I agree that this configuration - with HSRP and tracking - could work well for connections that are initiaed outbound. You would not necessarily need BGP. R1 could do an outbound NAT to whatever IP address space had been assigned by ISP 1. R2 could do an outbound NAT to whatever IP address space h

Re: Fiber optic interface question [7:36366]

2002-02-25 Thread Rob Webber
I am not completely sure, but I do not believe these two cards will interoperate. The PA-POS is a packet-over-Sonet module. Thus that box will look to frame the layer 2 frames as POS frames - and it will use the entire OC-3 for the one POS connection. The PA-A3 is an ATM module. It is looking to f

Re: TWO ISP AND ONE FAILURE [7:36371]

2002-02-25 Thread Rob Webber
For the outbound connectivity, use the HSRP track feature. That "watches" an interface (the WAN link to your ISP). If that interface goes down, the HSRP priority of that router gets reduced, making the other router (with the good ISP link) the HSRP primary. HSRP will make it so no changes are requ

Re: IDS 4210 help [7:35940]

2002-02-20 Thread Rob Webber
You will need to connect to the console of the IDS. Log in as netrangr (note: NO "e" in netrangr). Default Passord: "attack" Then enter: #sysconfig-sensor You will see a menu: 1 - IP Address 2 - IP Netmask 3 - IP Host Name 4 - Default Route 5 - Network Access Control 6 - Communications In

Re: Reverse telnet [7:32206]

2002-01-16 Thread Rob Webber
Try configuring "speed 9600" under the line aux 0. I do not believe you can use a straight cable, I thiink it has to be rolled. Also, are you sure port 2065 is the right port number? It sounds high, but that may be correct... Rob. ""Joaquim Lopes"" wrote in message [EMAIL PROTECTED]">news:[EMA