RE: PIX License upgrade procedure [7:73769]

2003-08-14 Thread Steve Wilson
for the general public company to use on their devices. If you require an upgrade for any other purpose it must be done through the proper channels using an authorised reseller. Steve Wilson Network Engineer -Original Message- From: Wilmes, Rusty [mailto:[EMAIL PROTECTED] Sent: 11 August 2003 13:57

RE: VPN Conncetion from Windows Client to nt domain [7:73720]

2003-08-08 Thread Steve Wilson
recommend NetBIOS over TCP/IP in the advanced settings. If you can ping the devices on the LAN, then you will require NetBIOS to browse properly. This is a simple solution to a possibly complicated scenario, but try it out anyway. Regards, Steve Wilson CCNP Network Engineer -Original Message

RE: Internet is very slow behind Pix 515E UR [7:70783]

2003-06-17 Thread Steve Wilson
Try taking the access-lists off the interfaces and try again. The access control list acting on the interfaces means that every single packet going through the interface is inspected. Steve Wilson Network Engineer -Original Message- From: Ismail Al-Shelh [mailto:[EMAIL PROTECTED

RE: RE: RE: RE: number of CCIE??? [7:70328]

2003-06-11 Thread Steve Wilson
job as well as I can and hope that if I am made redundant again I have the right combination of qualifications and experience to get another job. Can we please now all get off our high horses, get drunk and forget the whole argument? Cheers, Steve Wilson CCNP CCDA Network Engineer -Original

RE: CCNA certification [7:70400]

2003-06-09 Thread Steve Wilson
require passing both CCDA and the design exam, not just the design alone. Steve Wilson CCNP CCDA Network Engineer -Original Message- From: Mike Momb [mailto:[EMAIL PROTECTED] Sent: 09 June 2003 14:12 To: [EMAIL PROTECTED] Subject: CCNA certification [7:70400] To All, I have a friend who

RE: IOS Licensing [7:70133]

2003-06-05 Thread Steve Wilson
Yes you are going mad, welcome to the club. Steve Wilson CCNP CCDA Network Engineer -Original Message- From: Lauren Child [mailto:[EMAIL PROTECTED] Sent: 04 June 2003 15:07 To: [EMAIL PROTECTED] Subject: IOS Licensing [7:70133] Hiya Im a tad confused here and would appreciate some

RE: PIX to concentrator Problem ......Urgent [7:69988]

2003-06-03 Thread Steve Wilson
Check your network lists on the concentrator. They need to as explicit as possible. If you supernet any contiguous networks, ensure that you do not accidentally include a network that is really down another tunnel. Cheers, Steve Wilson CCNP CCDA Network Engineer -Original Message- From

RE: Debug display to VTY [7:66762]

2003-04-04 Thread Steve Wilson
of this type. Steve Wilson Network Engineer -Original Message- From: James Gosnold [mailto:[EMAIL PROTECTED] Sent: 04 April 2003 09:22 To: [EMAIL PROTECTED] Subject: RE: Debug display to VTY [7:66762] Hi, this seemed to do the trick, thanks. Just found it confusing as having gone through

RE: allowing telnet to the outside pix interface [7:66433]

2003-04-04 Thread Steve Wilson
PC and direct internet access. If we told you everything there would be no challenge. Good luck Cheers, Steve Wilson Network Engineer -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: 04 April 2003 14:23 To: [EMAIL PROTECTED] Subject: RE: allowing telnet

RE: ping things [7:66155]

2003-03-30 Thread Steve Wilson
Type in ping, press return and follow the on screen prompts. This will allow you to use ping in extended mode to specify the source address or interface. Steve Wilson Network Engineer -Original Message- From: Peter P [mailto:[EMAIL PROTECTED] Sent: 26 March 2003 11:16 To: [EMAIL

RE: allowing telnet to the outside pix interface [7:66433]

2003-03-30 Thread Steve Wilson
The safest way I have come across is to create a vpngroup with a single IP pool address and then allow telnet from that address only. You will need a vpn client of course. the sample config is available on CCO, or contact me offline for my version. Steve -Original Message- From: Ismail

RE: PIX Nat Traversal / VPN [7:66404]

2003-03-30 Thread Steve Wilson
Last time I looked you could not do NAT-T on a PIX with 6.3 software. Only VPN Gateways can handle it. Next gen of software should be able to do it sez the great god Cisco. I have been looking forward to this for some time as I install both PIX and VPN all the time. Cheers, Steve -Original

RE: reload 3500XL switch [7:66222]

2003-03-26 Thread Steve Wilson
If all the complicated answers fail try putting a timer switch on the socket that the device is powered from. Steve Wilson Network Engineer -Original Message- From: milind tare [mailto:[EMAIL PROTECTED] Sent: 26 March 2003 04:54 To: [EMAIL PROTECTED] Subject: reload 3500XL switch [7

RE: ping things [7:66155]

2003-03-26 Thread Steve Wilson
Type in ping, press return and follow the on screen prompts. This will allow you to use ping in extended mode to specify the source address or interface. Steve Wilson Network Engineer -Original Message- From: Peter P [mailto:[EMAIL PROTECTED] Sent: 26 March 2003 11:16 To: [EMAIL

RE: Redistributing Static within RIP version 1 - what is this [7:66254]

2003-03-26 Thread Steve Wilson
Maybe I'm simple but RIP v1 is classfull last time I looked. Also check for the command IP SUBNET-ZERO, it may come in handy. Steve Wilson Network Engineer -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: 26 March 2003 13:02 To: [EMAIL PROTECTED] Subject

RE: PDM Question [7:65954]

2003-03-22 Thread Steve Wilson
the PDM is a useful tool for a graphical view of the configuration. If you are using your PIX to terminate VPN clients or tunnels you may stillned to use the command line to administer and configure them. This might be improved in the next release of the Operating System. Personally i agree that

RE: Open http: traffic on firewall... [7:65755]

2003-03-20 Thread Steve Wilson
without seeing your router it may be that the ethernet port is e0/0 perchance. It may even be a fastethernet port. Check the physical make up of the router. Cheers, Steve Wilson -Original Message- From: SMAN To: [EMAIL PROTECTED] Sent: 20/03/2003 15:33 Subject: Re: Open http: traffic

RE: ISDN Config Problem? [7:65315]

2003-03-14 Thread Steve Wilson
authentication pap callin ppp pap sent-username CSTM password ! ip nat inside source list 1 interface Dialer1 overload no ip http server ip classless ip route 0.0.0.0 0.0.0.0 Dialer1 ! access-list 1 permit 192.168.10.0 0.0.0.255 dialer-list 1 protocol ip permit ! Cheers, Steve Wilson

RE: 3000 Concentrator behind/in front or parallel to PIX? [7:64455]

2003-03-05 Thread Steve Wilson
on the VPN concentrator allowing the PIX to concentrate its processing power on the primary task that it is for. Both devices provide security and fire-walling to a certain degree, it's just horses for courses as to which does which bit better. Steve Wilson Network Engineer -Original Message

RE: Catalyst 3550 SMI or EMI [7:64442]

2003-03-05 Thread Steve Wilson
to understand what the filename means. Steve Wilson Network Engineer -Original Message- From: John Tafasi [mailto:[EMAIL PROTECTED] Sent: 05 March 2003 06:33 To: [EMAIL PROTECTED] Subject: Catalyst 3550 SMI or EMI [7:64442] How do I know if a catalyst 3550 is running EMI or SMI image. I tried

RE: ??? collapsed backbone ??? [7:64467]

2003-03-05 Thread Steve Wilson
by a high speed link between the two big sized distribution switches. An example would be two catalyst 6500 type switches as a central distribution fanning out to lots of access switches. The link between the two 6500s could be a group of gigabit fibre links. Steve Wilson Network Engineer

RE: Bizzare Routing/VPN Issue [7:64301]

2003-03-04 Thread Steve Wilson
that it is connecting to. the only way that I have managed to solve the problem is by having completely specific network lists that ensure that there is no dubiety in where packets can be routed to. if you are using super-netting be careful. Steve Wilson Network Engineer -Original Message

RE: Cat4006 - Prompt [7:63984]

2003-02-28 Thread Steve Wilson
Systems, Inc. Console Fri Feb 28 2003, 02:25:04 Enter password: cat4006 Have fun, Steve Wilson Network Engineer -Original Message- From: Eagles Fan [mailto:[EMAIL PROTECTED] Sent: 27 February 2003 20:51 To: [EMAIL PROTECTED] Subject: Re: Cat4006 - Prompt [7:63984] I have tried

RE: PIX VPN/IPSEC [7:64016]

2003-02-28 Thread Steve Wilson
inside telnet timeout 5 ssh timeout 5 terminal width 80 Cryptochecksum:57078d328d36e851c854b4913142d72e : end Best of luck, Steve Wilson Network Engineer -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: 27 February 2003 20:38 To: [EMAIL PROTECTED] Subject: PIX VPN

RE: L3 Switching Huh???? [7:63728]

2003-02-27 Thread Steve Wilson
device working at layer3 between subnets and a chassis like a 6509 which can have individual blades perform the functions without the limitation of wires between the physical interfaces. The wires are still there, they are just created in software in the chassis. Cheers, Steve Wilson Network Engineer

RE: PIX question [7:63892]

2003-02-27 Thread Steve Wilson
Ed, Try clear logging. It depends on what you are trying to clear. Steve Wilson Network Engineer -Original Message- From: Edward Sohn [mailto:[EMAIL PROTECTED] Sent: 26 February 2003 18:30 To: [EMAIL PROTECTED] Subject: PIX question [7:63892] does someone know what the equivalent

RE: L3 Switching Huh???? [7:63728]

2003-02-26 Thread Steve Wilson
it clears away some of the mud. Cheers, Steve Wilson Network Engineer -Original Message- From: DeVoe, Charles (PKI) [mailto:[EMAIL PROTECTED] Sent: 26 February 2003 12:45 To: [EMAIL PROTECTED] Subject: RE: L3 Switching Huh [7:63728] OK, let me try this again. I am trying to figure out

RE: ADSL Between Head Office and Remote Branch [7:63711]

2003-02-25 Thread Steve Wilson
Ismail, It does not look possible. Where are you getting the signalling, timing and IP addresses from? If you can build it on your test bench with just a pair of wires, best of luck. Steve Wilson Network Engineer -Original Message- From: Ismail Al-Shelh [mailto:[EMAIL PROTECTED] Sent

RE: Strange problem with a 2924XL. [7:63680]

2003-02-25 Thread Steve Wilson
Check the device that is connected to the port for speed setting and duplex. If possible fix it to one particular setting at both ends. Start low and then build up to 100 full. The errors are usually caused by a mismatch or cabling that cannot handle it. Steve Wilson Network Engineer

RE: WIC-1T [7:63364]

2003-02-19 Thread Steve Wilson
Derek, 12.2(8)T4 has got bugs, CCO recommends upgrading to T5. When I built your kit I could see both interfaces as being up when connected to a DTE device. Cheers, Steve Wilson -Original Message- From: DW [mailto:[EMAIL PROTECTED]] Sent: 19 February 2003 16:43 To: [EMAIL PROTECTED