Pat,
Getting a PIX to pass OSPF would require one of two methods: Routing or
NAT. First, the PIX isn't a router, and if it were it still wouldn't work
since OSPF LSAs are sent to the non-routable 224.0.0.5/6 addresses (as
well as have a TTL of 1). NAT is not a viable alternative as NAT will no
Michael,
CGMP does not have a concept of the multicast source (unlike the
multicast routing protocol) and therefore the fact that the source is on
the same link as the router should not change standard CGMP operation --
associating the CAM table with the various multicast groups.
- Tom
In artic
Dion,
On the PIX 515 that we have, the activation key is listed directly under
the serial number of the "sh ver" (the very last line). Perhaps you are
running really old PIX code???
In the past I have successfully obtained the correct serial number by
applying for the IPSec upgrade license for
Joaquim,
I had a similar problem with CRC and Frame alignment errors that turned
out to be a bad CSD/DSU. It looks like you might be experiencing this as
well, especially given the number of interface resets.
- Tom
In article , "Joaquim Lopes"
wrote:
> Hi, what could cause this errors?
>
>
Hunt,
You are correct, there is nothing filtering the routes entering from
Router B, without local preference set higher on 10.1.1.1 (Router A?) for
the routes, nothing will prevent AS 202 from being used for other
destinations as well.
More confusing to me is the configuration.
I read the ques
Steven,
STP is a layer 2 only function and in general it is configured only on
switches. It can be configured on a router if the router is configured to
act as a transparent bridge. More info can be found on Cisco's web site
at:
http://www.cisco.com/univercd/cc/td/doc/product/software/ssr83/rp
Elmer,
In short, a totally stubby area blocks all Type 3, 4 and 5 LSAs from
entering the stub area. A stub area blocks all Type 4 and 5 LSAs from
entering the stub area. Both inject an additional Type 3 into the stub
for the default route.
>From the perspective of a stub router, you will see a
Steven,
I am not 100% clear on the question that you have asked. To get two VLANs
communicated to the 2610 router would require trunking both the port on
the switch and the port on the router. Unfortunately the 261x routers do
not support trunking. The 262x routers do (with the Plus feature se
The 261x series routers do not support trunking. 262x routers with the
Plus feature-set do, but that won't help much here.
- Tom
On Tue, 05 Feb 2002 12:51:18 -0500, Don Nguyen wrote:
> If I'm reading your question correctly, the link between your router and
> switch would be a trunk line. You
Elmer,
There are no bits set, TSSAs are Cisco-proprietary. TSSAs are configured
only on the ABRs. Non-ABRs in the stub area have no idea that they are
in a TSSA.
- Tom
On Tue, 05 Feb 2002 13:59:56 -0500, Cebuano wrote:
> Exactly. And to add to the LSA-confusion, NSSA'a get a default Type 7
>
Does anyone have any idea why this worked??? Setting the RIP and SAP
timers on a __LAN__ link should have had no positive effect. It seems
like the only perceivable change would be the flapping of remote networks
and servers -- assuming that the timers were not modified on the server
also.
Any
It really depends on the PBX interfaces available and the type of service
you are trying to offer to/from the VoIP side. You will probably want E&M
or FXO.
- Tom
On Tue, 05 Feb 2002 14:47:46 -0500, Tom Richs wrote:
> How can I connect a router to a PBX to get it to talk. In specific I'm
> imp
Tunde,
If configuring static IP addresses served as a temporary workaround, your
problem is DHCP. Enabling Spanning Tree portfast on the ports to which
stations directly attach will fix your problem:
set spantree portfast enable
- Tom
On Fri, 07 Feb 2003 12:16:47 +, Tunde Kalejaiye wro
Tunde,
If configuring static IP addresses served as a temporary workaround, your
problem is DHCP. Enabling Spanning Tree portfast on the ports to which
stations directly attach will fix your problem:
set spantree portfast enable
- Tom
On Fri, 07 Feb 2003 12:16:47 +, Tunde Kalejaiye wro
Maroun,
OSPF routers don't really send out routes to their neighbors, they send
LSAs. For most things you can think of them as being the same, except
in situations like yours.
Your router is presumably creating the default route (use 'show ip ospf
database' to verify) and therefore creating t
Kevin,
It might just be an oversight, but R5 and R6 don't seem to have a
loopback or explicit router ID defined.
Also, what is the OSPF network type on R2? It's set manually on R5 and
R6, but left to the default on R2. I believe (but haven't verified) the
default would be non-broadcast not p
First of all, I wouldn't post a question advertising it to be from the
350-001 test to a public newsgroup. It just seems like a bad idea.
I'm responding to the question based on the fact that I took the test a
couple weeks ago and didn't see the question. I'm HOPING that the
question is from
Salvatore,
ebg-multihop is not required for load balancing. It can be beneficial
to use a loopback to peer from/to, similar to IPX internal networks
provide better load balancing for NetWare servers.
If you feel it's a good idea to peer to/from loopack interfaces
(redundancy, better balancing
Raj,
Is the software going to be open source? I have a large collection of
scripts for automating configuration (during rollouts) and basic
troubleshooting. I've had intentions of providing a GUI front-end at
some point, either in Java or PHP, but never seem to have the time to
get around to
J B,
If you're familiar with Cisco routers, WAN troubleshooting (probably T1
or Frame) and QoS intricasies, then $5,500 is way too much. You could
set up the routers well within a single day, probably closer to 1/2 day.
If you're not familiar with Cisco routers, especially QoS since quality
p
(Watch for word wrap)
Guruprasad Sanjeevi wrote:
> Group,
>
> I am going to take ccna 3.0 as my ccna 1.0 has expired. Can anyone
> please tell me the topics that I need to focus on? . I'm working on
> routers for past 3 years
>
> TIA
> guru
Message Posted at:
http://www.groupstudy.com/
The URL was stripped from the earlier post:
http://www.cisco.com/warp/public/10/wwtraining/
certprog/testing/current_exams/640-607.html
Tom Martin wrote:
>(Watch for word wrap)
>
> Guruprasad Sanjeevi wrote:
>
>>Group,
>>
>>I am going to take ccna 3.0 a
Priscilla,
I've found that CDP works great for identifying transit Ethernet
switches since CDP details IP addresses, and suprisingly picks up more
that just Cisco equipment. I've noticed HP switches providing CDP, but
most of the networks I work with are primarily Cisco. One of the
biggest b
Priscilla,
I've found that CDP works great for identifying transit Ethernet
switches since CDP details IP addresses, and suprisingly picks up more
that just Cisco equipment. I've noticed HP switches providing CDP, but
most of the networks I work with are primarily Cisco. One of the
biggest benef
Joseph,
I noticed that too, but never really thought about it. I browsed the
article (http://www.certmag.com/issues/jan02/feature_sosbe.cfm). Figure
4, 6 and 9 all rank RHCE at the top.
If a well-known third party ranked your certification as overall best
overall quality, I'm sure you'd adve
'clear trunk' is used to prevent VLAN traffic from ever crossing a trunk
link.
VTP pruning is used to prevent broadcasts from trunk links only when
there are no hosts on the VLAN on the other side of the trunk link.
listmailing wrote:
> Same, not the same?
>
> From what I am reading, Clear tr
Ken,
PIM messages are sent multicast, either to 224.0.0.2 or 224.0.0.13
depending on the PIM version.
PIM Joins are sent periodically, every 60 seconds.
- Tom
[EMAIL PROTECTED] wrote:
> Hello,
>
> I have two questions here on the above.
>
> Are PIM joins sent multicast or unicast. Some docs
Watch for wrap:
http://www.cisco.com/en/US/customer/tech/
tk543/tk545/technologies_tech_note09186a0080114326.shtml
neil K wrote:
> Can somebody tell me how to configure LLQ on Ethernet subinterfaces
> connected to two VLAN's.
> Will appreciate it.
Message Posted at:
http://www.groupstudy.com/
Robert,
The local Token Ring number is 9. The interface will bridge traffic
from this ring to ring number 23. The Token Ring RIF will indicate the
router as bridge 3.
- Tom
Robert Perez wrote:
> interface TokenRing0
> ip address 192.168.34.3 255.255.255.0
> ring-speed 4
> source-bridge 9
DJ,
A route-map is just way more flexible.
A distribute-list will afford you a single access-list in which you must
define everything, where as a route-map allows you to use multiple
access-lists. This is especially important during temporary changes to
a network topology, where a new route-m
Bala Ware,
With all due respect, it seems to me that you have a political problem
on your hands. You're dealing with a GM that wants (more or less)
direct access to the Internet and manages the person(s) responsible for
managing the firewall.
Of course there's ways to identify what he's doing
Lo,
Dynamic VLANs are based on MAC address, so a PC with one NIC will have
one MAC even if you have two IP addresses configured on it. The switch
will put the PC in the correct VLAN based on its database.
The PC will end up in one VLAN, and as such will only be able to
communicate with one of
Thomas,
You can use a straight-through CAT5 or CAT3 patch cable. The difference
is in the meaning of the pins. From a cabling perspective it doesn't
matter.
- Tom
Thomas N wrote:
> Hi All,
>
> I am wondering what is the difference between the RJ48 and RJ45
> connector/cable? I am setting a
Jason,
Chuck answered pretty completely, but there's another option that works
well, changing administrative distances. At the redistribution points,
set the default administrative distance for each protocol to something
like 200. Next create an access-list that identifies all routes
interna
Chris,
STP should be enough to avoid these types of problems. In order to cause
a bridging loop the station would have to have both interfaces in the
same VLAN and forward all L2 traffic except for BPDUs. Even if this were
the case the wireless network (10-Mbps?) shouldn't be enough to bring
t
Vik,
There could be any number of reasons that DHCP isn't working. The client
may not be requesting DHCP, the switch may not have portfast enabled, a
router not having an IP helper address, DHCP server offline, DHCP server
without a scope for the VLAN, and so on.
Perform a packet trace from th
Milind,
The 3550 switches do not support AppleTalk, which explains why your
printer doesn't work when you disable bridging. Have you tried enabling
TCP/IP printing on the printer?
If you're running an older MacOS, TCP/IP printing may not be available
to you. I'm not intimately familiar with Ma
Dave,
Comments are inline.
- Tom
Dave C. wrote:
> I have a question regarding VTP.
>
> I am working with a network configuration that has dual 6509's as core
> switches. One is the VTP domain server, the other is a VTP domain client.
> All other 4000 switches are defined as client also.
>
>
Tim,
You can increase the metric of a static route using the following syntax
(assuming that you want the AD to be 90):
ip route 0.0.0.0 0.0.0.0 w.x.y.z 90
You can decrease the AD of EIGRP using to 1 (assuming you still want
exterior routes to be 170) using following syntax:
router ei
Olugbenga,
You didn't say what kind of proxy. I'm going to guess that you are
referring to a transparent web proxy.
TCP port 80. Use policy-based routing to redirect web traffic to the
transparent proxy.
- Tom
OLUGBENGA BANKOLE wrote:
> Please does anyone know which port that Proxy requests r
Gbenga,
Proxy Server 2.0 was the last version released before ISA server, and it
did not support transparent proxy. Supporting transparent proxy is
important here, since the HTTP header for a proxy request will always
contain certain lines (such as "Host:"), whereas direct HTTP 1.0
requests ma
Alaerte,
I can think of a couple ways to doing this. Be forewarned. Both are ugly.
Method #1: Relocate the servers /30 subnet
--
We'll say the server's IP address is 192.3.3.254/24. Create a secondary
IP address on R2 for 192.3.3.252/30. R2's secondary ad
Mark,
It sounds like the voice traffic is being prioritized correctly since
the voice is "rock solid" after the connection is made. Looking at your
config this is strange as the default IP Precedence should be 0 for
voice traffic and I do not see where you have specified this in your
dial pee
Charles,
You can get the information from Cisco's web site using the following
URL. It requires a CCO user account to access it though:
http://www.cisco.com/en/US/partner/learning/le3/le11/learning_ccie_resource_guide.html#18
Relevant verbage in case you to not have a CCO account:
18. Lab Exa
Robert,
I believe that your diagram should reflect R1's serial interface to R2
as s0/1 instead of s0/0. This caused me some confusion in trying to
figure out the configs. Actually, there is still some confusion given
the a duplicate IP (172.16.66.1) assigned to both routers on that serial
link
David,
Absolutely.
When specifying the translation commands, instead of specifying a full
IP translation just specify the port. For example, assuming you wanted
your public IP (12.12.12.12) to redirect HTTP traffic to 192.168.0.1 and
HTTPS traffic to 192.168.0.2:
static (inside,outside)
Dovelet,
Use a static MAC address:
(config)# mac-address-table 01.00.5e.11.22.33 fastethernet 0/1
fastethernet 0/2 fastethernet 0/3 vlan 1
Just make sure that the MAC address correctly represents the multicast
IP. I chose the MAC address for 224.17.34.51, mainly because I'm not
particularly
rbx10,
224.0.0.0-255 multicast addresses are translated into L2 addresses the
same way as the rest of the multicast addresses. For Ethernet, the MAC
address becomes 0100.5e followed by the last 23 bits of the multicast IP
address.
Take 224.0.0.1. Last 23 bits are 000 0001. Tra
Mohamed,
OSPF calculates costs based on interface bandwidth, each router
assigning the link cost based on its idea of the bandwidth. For
multipoint the costs for a link may be different depending on which
router it is being viewed from.
- Tom
Mohamed Saro wrote:
> How can the router calculate
rbx10,
224.0.0.0-255 multicast addresses are translated into L2 addresses the
same way as the rest of the multicast addresses. For Ethernet, the MAC
address becomes 0100.5e followed by the last 23 bits of the multicast IP
address.
Take 224.0.0.1. Last 23 bits are 000 0001. Tra
Justin,
The lab I use is at work, and I need remote access to it to do labs at
home. I use a Linux PC with a Moxa PCI serial port card (8 serial
ports). With the 2 built-in serial ports, I can connect to 10 Cisco
devices. I have users set up so that when user R1 logs in via SSH the
console win
Robert,
Kind of annoying isn't it? I looked a while ago and the short answer was
it's not there and you can't do it. Some quick checking on Cisco's site
showed that they might finally have released it in newer code though:
http://www.cisco.com/en/US/partner/products/hw/switches/ps637/prod_relea
Fred,
If the access-list were applied as an inbound or outbound interface
filter, it would match a single host. Since the access-list is being
applied using a distribution list it doesn't match just a single host --
it matches the network 131.108.0.0 and must match every bit exactly.
It wouldn
Comments are inline.
Reimer, Fred wrote:
>So would it match a network of 131.108.0.0/24? From what Cisco says, that
>it matches the classful mask if none is specified, it should not match.
>From what you say it sounds like you think it would match.
>
>
An access-list with wildcards (131.108.0
KW S,
You need to obtain Smartnet on the routers. Once you do you will get a
CCO and download access. Contact your local Cisco partner for more
information:
http://tools.cisco.com/WWChannels/LOCATR/jsp/partner_locator.jsp
- Tom
KW S wrote:
> Dear all
>
> Does anyone know where I can download
John,
The behavior changed with the IOS releases. Newer IOS releases with
static routes pointing to an interface will have an administrative
distance of 1, not 0. Older versions will have an administrative
distance of 0. Unfortunately I do not know the exact release in which
the behavior chang
John,
I have come across ODR in production a couple of times. Up until
recently I had thought that ODR worked quite well for hub and spoke
topologies...
My most recent involvement with ODR occurred when replacing a 2621 with
a 3745, which was the hub of the hub-and-spoke topology. I quickly
l
Greg,
The configuration on the dialer interface is used when making outbound
calls. When an incoming call comes in, it isn't associated with a
specific dialer interface. If you don't specify the encapsulation on the
interface any incoming calls will be treated as HDLC.
- Tom
Greg Kirkness wro
Describe how your clients lose their network connection. Do IP pings
fail? Does DNS lookups fail (say, pinging www.google.com)? Do server
shares become unreachable? Is network neighborhood not working?
It also would be very helpful to get a network capture during the
problem. If you don't alrea
Chris,
Since you are choosing the link based on MAC addresses and only one
switch LED is blinking, is your test traffic to stations located across
a router? The router will obviously have a single MAC address, so
EtherChannel based on MACs will use only a single link. Perhaps you
should change
Johan,
Sure! Linux has the ability to read and write various flash types and
formats. I did something very similar a while back, albeit not with a 1600.
There's a really good chance that your Linux system will pick up the
flash, but not necessarily "out-of-the-box". I had to recompile my
kerne
A couple of days ago I came across a new (to me anyway) Cisco feature,
menus. So naturally I configured a router with menus to see how it
works... Everything seems to work fine, except the login option.
When Telneting to this router, I use the username and password as
specified within the confi
email, and should immediately delete it from your computer.
>
>
>-Original Message-
>From: Tom Martin [mailto:[EMAIL PROTECTED]
>Sent: Thursday, July 24, 2003 9:47 AM
>To: [EMAIL PROTECTED]
>Subject: Cisco menu logins [7:72931]
>
>A couple of days ago I came across
Pichit,
Both routing protocols will learn about the networks. Neither routing
protocol will be responsible for placing the routes in the routers
routing table -- the administrative distances of the routing protocols
are both higher than the administrative distance of a directly connected
inter
Don't forget that you are still limited by the Cross-stack maximum
speed. You won't be able to get 90-Gbps across the 32-Gbps stack
"backplane".
Ismail Al-Shelh wrote:
> Hi chuck,
>
> I think they cisco mentioned it officially , yesterday I read some
> documents about the 3750 , and I found th
Keep in mind that neither the 1601 or the 2509 are beefy routers. You
may be hitting a practical limitation. You may want to verify that CEF
is enabled (or at least fast switching if CEF isn't supported).
How does your router CPU utilization look?
Paul Carter wrote:
> I have a 1601 router and a
As far as the duplicate MACs go, it sounds like you have a layer-2 loop.
Especially considering that all of your servers are experiencing the
problem. When they ARP to verify that no other station has their IP,
they see their own ARP and assume that another station is doing the same
thing.
Lay
Oops, I read the post as if the MACs were duplicated.
I have also come across a situtation where a faulty station (Wyse
terminal actually) responded to all ARPs as if it owned the IP. I had an
interesting conversation with Wyse support who remained convinced that
it was impossible for their ter
Keep in mind that neither the 1601 or the 2509 are beefy routers. You
may be hitting a practical limitation. You may want to verify that CEF
is enabled (or at least fast switching if CEF isn't supported).
How does your router CPU utilization look?
Paul Carter wrote:
> I have a 1601 router and a
The FECN bits are getting set, so traffic from the remote router (to your
router) is experiencing congestion somewhere within the Frame Relay cloud.
There's not really much you or your router can do about it. FECNs are sort
of useless since by the time your router sees them the congestion has
alrea
70 matches
Mail list logo