Re: OSPF across PIX [7:24608]

2002-02-04 Thread Tom Martin
Pat, Getting a PIX to pass OSPF would require one of two methods: Routing or NAT. First, the PIX isn't a router, and if it were it still wouldn't work since OSPF LSAs are sent to the non-routable 224.0.0.5/6 addresses (as well as have a TTL of 1). NAT is not a viable alternative as NAT will no

Re: multicast / CGMP towards the multicast server [7:33964]

2002-02-04 Thread Tom Martin
Michael, CGMP does not have a concept of the multicast source (unlike the multicast routing protocol) and therefore the fact that the source is on the same link as the router should not change standard CGMP operation -- associating the CAM table with the various multicast groups. - Tom In artic

Re: PIX activation key [7:34450]

2002-02-05 Thread Tom Martin
Dion, On the PIX 515 that we have, the activation key is listed directly under the serial number of the "sh ver" (the very last line). Perhaps you are running really old PIX code??? In the past I have successfully obtained the correct serial number by applying for the IPSec upgrade license for

Re: Interface errors [7:34461]

2002-02-05 Thread Tom Martin
Joaquim, I had a similar problem with CRC and Frame alignment errors that turned out to be a bad CSD/DSU. It looks like you might be experiencing this as well, especially given the number of interface resets. - Tom In article , "Joaquim Lopes" wrote: > Hi, what could cause this errors? > >

Re: Route-map question [7:34431]

2002-02-05 Thread Tom Martin
Hunt, You are correct, there is nothing filtering the routes entering from Router B, without local preference set higher on 10.1.1.1 (Router A?) for the routes, nothing will prevent AS 202 from being used for other destinations as well. More confusing to me is the configuration. I read the ques

Re: Port spanning question [7:34469]

2002-02-05 Thread Tom Martin
Steven, STP is a layer 2 only function and in general it is configured only on switches. It can be configured on a router if the router is configured to act as a transparent bridge. More info can be found on Cisco's web site at: http://www.cisco.com/univercd/cc/td/doc/product/software/ssr83/rp

Re: Doyle on Stub and Totally Stubby areas [7:34478]

2002-02-05 Thread Tom Martin
Elmer, In short, a totally stubby area blocks all Type 3, 4 and 5 LSAs from entering the stub area. A stub area blocks all Type 4 and 5 LSAs from entering the stub area. Both inject an additional Type 3 into the stub for the default route. >From the perspective of a stub router, you will see a

Re: VLan accesability [7:34471]

2002-02-05 Thread Tom Martin
Steven, I am not 100% clear on the question that you have asked. To get two VLANs communicated to the 2610 router would require trunking both the port on the switch and the port on the router. Unfortunately the 261x routers do not support trunking. The 262x routers do (with the Plus feature se

RE: VLan accesability [7:34471]

2002-02-05 Thread Tom Martin
The 261x series routers do not support trunking. 262x routers with the Plus feature-set do, but that won't help much here. - Tom On Tue, 05 Feb 2002 12:51:18 -0500, Don Nguyen wrote: > If I'm reading your question correctly, the link between your router and > switch would be a trunk line. You

Re: Doyle on Stub and Totally Stubby areas [7:34478]

2002-02-05 Thread Tom Martin
Elmer, There are no bits set, TSSAs are Cisco-proprietary. TSSAs are configured only on the ABRs. Non-ABRs in the stub area have no idea that they are in a TSSA. - Tom On Tue, 05 Feb 2002 13:59:56 -0500, Cebuano wrote: > Exactly. And to add to the LSA-confusion, NSSA'a get a default Type 7 >

Re: IPX Routing problem-Conclusion [7:34485]

2002-02-05 Thread Tom Martin
Does anyone have any idea why this worked??? Setting the RIP and SAP timers on a __LAN__ link should have had no positive effect. It seems like the only perceivable change would be the flapping of remote networks and servers -- assuming that the timers were not modified on the server also. Any

Re: PBX [7:34499]

2002-02-05 Thread Tom Martin
It really depends on the PBX interfaces available and the type of service you are trying to offer to/from the VoIP side. You will probably want E&M or FXO. - Tom On Tue, 05 Feb 2002 14:47:46 -0500, Tom Richs wrote: > How can I connect a router to a PBX to get it to talk. In specific I'm > imp

Re: Catalyst 4000 and DHCP [7:62632]

2003-02-09 Thread Tom Martin
Tunde, If configuring static IP addresses served as a temporary workaround, your problem is DHCP. Enabling Spanning Tree portfast on the ports to which stations directly attach will fix your problem: set spantree portfast enable - Tom On Fri, 07 Feb 2003 12:16:47 +, Tunde Kalejaiye wro

Re: Catalyst 4000 and DHCP [7:62632]

2003-02-09 Thread Tom Martin
Tunde, If configuring static IP addresses served as a temporary workaround, your problem is DHCP. Enabling Spanning Tree portfast on the ports to which stations directly attach will fix your problem: set spantree portfast enable - Tom On Fri, 07 Feb 2003 12:16:47 +, Tunde Kalejaiye wro

Re: default-information originate with route-map [7:69558]

2003-05-29 Thread Tom Martin
Maroun, OSPF routers don't really send out routes to their neighbors, they send LSAs. For most things you can think of them as being the same, except in situations like yours. Your router is presumably creating the default route (use 'show ip ospf database' to verify) and therefore creating t

Re: Virtual Link Problem [7:69640]

2003-05-29 Thread Tom Martin
Kevin, It might just be an oversight, but R5 and R6 don't seem to have a loopback or explicit router ID defined. Also, what is the OSPF network type on R2? It's set manually on R5 and R6, but left to the default on R2. I believe (but haven't verified) the default would be non-broadcast not p

Re: Packet retransmit questiion [7:69715]

2003-05-29 Thread Tom Martin
First of all, I wouldn't post a question advertising it to be from the 350-001 test to a public newsgroup. It just seems like a bad idea. I'm responding to the question based on the fact that I took the test a couple weeks ago and didn't see the question. I'm HOPING that the question is from

Re: BGP Load Balance [7:69611]

2003-05-29 Thread Tom Martin
Salvatore, ebg-multihop is not required for load balancing. It can be beneficial to use a loopback to peer from/to, similar to IPX internal networks provide better load balancing for NetWare servers. If you feel it's a good idea to peer to/from loopack interfaces (redundancy, better balancing

Re: Dynamic Route Graphs...... [7:69738]

2003-05-29 Thread Tom Martin
Raj, Is the software going to be open source? I have a large collection of scripts for automating configuration (during rollouts) and basic troubleshooting. I've had intentions of providing a GUI front-end at some point, either in Java or PHP, but never seem to have the time to get around to

Re: Help with Cisco 3745 configuration [7:69765]

2003-05-30 Thread Tom Martin
J B, If you're familiar with Cisco routers, WAN troubleshooting (probably T1 or Frame) and QoS intricasies, then $5,500 is way too much. You could set up the routers well within a single day, probably closer to 1/2 day. If you're not familiar with Cisco routers, especially QoS since quality p

Re: Need help for CCNA 3.0 [7:69772]

2003-05-30 Thread Tom Martin
(Watch for word wrap) Guruprasad Sanjeevi wrote: > Group, > > I am going to take ccna 3.0 as my ccna 1.0 has expired. Can anyone > please tell me the topics that I need to focus on? . I'm working on > routers for past 3 years > > TIA > guru Message Posted at: http://www.groupstudy.com/

Re: Need help for CCNA 3.0 [7:69772]

2003-05-30 Thread Tom Martin
The URL was stripped from the earlier post: http://www.cisco.com/warp/public/10/wwtraining/ certprog/testing/current_exams/640-607.html Tom Martin wrote: >(Watch for word wrap) > > Guruprasad Sanjeevi wrote: > >>Group, >> >>I am going to take ccna 3.0 a

Re: Dynamic Route Graphs...... [7:69738]

2003-05-30 Thread Tom Martin
Priscilla, I've found that CDP works great for identifying transit Ethernet switches since CDP details IP addresses, and suprisingly picks up more that just Cisco equipment. I've noticed HP switches providing CDP, but most of the networks I work with are primarily Cisco. One of the biggest b

Re: Dynamic Route Graphs...... [7:69738]

2003-05-30 Thread Tom Martin
Priscilla, I've found that CDP works great for identifying transit Ethernet switches since CDP details IP addresses, and suprisingly picks up more that just Cisco equipment. I've noticed HP switches providing CDP, but most of the networks I work with are primarily Cisco. One of the biggest benef

Re: RHCE Vs. CCIE [7:69801]

2003-05-30 Thread Tom Martin
Joseph, I noticed that too, but never really thought about it. I browsed the article (http://www.certmag.com/issues/jan02/feature_sosbe.cfm). Figure 4, 6 and 9 all rank RHCE at the top. If a well-known third party ranked your certification as overall best overall quality, I'm sure you'd adve

Re: VTP pruning verses clear trunk [7:69844]

2003-05-31 Thread Tom Martin
'clear trunk' is used to prevent VLAN traffic from ever crossing a trunk link. VTP pruning is used to prevent broadcasts from trunk links only when there are no hosts on the VLAN on the other side of the trunk link. listmailing wrote: > Same, not the same? > > From what I am reading, Clear tr

Re: PIM-SM Join Messages. [7:70014]

2003-06-04 Thread Tom Martin
Ken, PIM messages are sent multicast, either to 224.0.0.2 or 224.0.0.13 depending on the PIM version. PIM Joins are sent periodically, every 60 seconds. - Tom [EMAIL PROTECTED] wrote: > Hello, > > I have two questions here on the above. > > Are PIM joins sent multicast or unicast. Some docs

Re: LLQ on Ethernet subinterfaces [7:70020]

2003-06-04 Thread Tom Martin
Watch for wrap: http://www.cisco.com/en/US/customer/tech/ tk543/tk545/technologies_tech_note09186a0080114326.shtml neil K wrote: > Can somebody tell me how to configure LLQ on Ethernet subinterfaces > connected to two VLAN's. > Will appreciate it. Message Posted at: http://www.groupstudy.com/

Re: Please expalin the numbers in the source-bridge statement?? [7:70093]

2003-06-04 Thread Tom Martin
Robert, The local Token Ring number is 9. The interface will bridge traffic from this ring to ring number 23. The Token Ring RIF will indicate the router as bridge 3. - Tom Robert Perez wrote: > interface TokenRing0 > ip address 192.168.34.3 255.255.255.0 > ring-speed 4 > source-bridge 9

Re: route-map V distribute list's [7:70121]

2003-06-05 Thread Tom Martin
DJ, A route-map is just way more flexible. A distribute-list will afford you a single access-list in which you must define everything, where as a route-map allows you to use multiple access-lists. This is especially important during temporary changes to a network topology, where a new route-m

Re: How to trace conversations of Yahoo and Acess to Sex sites [7:70130]

2003-06-05 Thread Tom Martin
Bala Ware, With all due respect, it seems to me that you have a political problem on your hands. You're dealing with a GM that wants (more or less) direct access to the Internet and manages the person(s) responsible for managing the firewall. Of course there's ways to identify what he's doing

Re: Dynamic VLAN [7:70445]

2003-06-12 Thread Tom Martin
Lo, Dynamic VLANs are based on MAC address, so a PC with one NIC will have one MAC even if you have two IP addresses configured on it. The switch will put the PC in the correct VLAN based on its database. The PC will end up in one VLAN, and as such will only be able to communicate with one of

Re: RJ48-RJ48 cable [7:70596]

2003-06-12 Thread Tom Martin
Thomas, You can use a straight-through CAT5 or CAT3 patch cable. The difference is in the meaning of the pins. From a cabling perspective it doesn't matter. - Tom Thomas N wrote: > Hi All, > > I am wondering what is the difference between the RJ48 and RJ45 > connector/cable? I am setting a

Re: EIGRP OSPF DUAL MUTUAL REDISTRIBUTION [7:70643]

2003-06-16 Thread Tom Martin
Jason, Chuck answered pretty completely, but there's another option that works well, changing administrative distances. At the redistribution points, set the default administrative distance for each protocol to something like 200. Next create an access-list that identifies all routes interna

Re: STP problem [7:70797]

2003-06-17 Thread Tom Martin
Chris, STP should be enough to avoid these types of problems. In order to cause a bridging loop the station would have to have both interfaces in the same VLAN and forward all L2 traffic except for BPDUs. Even if this were the case the wireless network (10-Mbps?) shouldn't be enough to bring t

Re: dhcp packets not visible in 6509 [7:70898]

2003-06-19 Thread Tom Martin
Vik, There could be any number of reasons that DHCP isn't working. The client may not be requesting DHCP, the switch may not have portfast enabled, a router not having an IP helper address, DHCP server offline, DHCP server without a scope for the VLAN, and so on. Perform a packet trace from th

Re: Bridging [7:70912]

2003-06-19 Thread Tom Martin
Milind, The 3550 switches do not support AppleTalk, which explains why your printer doesn't work when you disable bridging. Have you tried enabling TCP/IP printing on the printer? If you're running an older MacOS, TCP/IP printing may not be available to you. I'm not intimately familiar with Ma

Re: VTP Domain Server Question [7:70942]

2003-06-20 Thread Tom Martin
Dave, Comments are inline. - Tom Dave C. wrote: > I have a question regarding VTP. > > I am working with a network configuration that has dual 6509's as core > switches. One is the VTP domain server, the other is a VTP domain client. > All other 4000 switches are defined as client also. > >

Re: Route Metrics [7:70958]

2003-06-20 Thread Tom Martin
Tim, You can increase the metric of a static route using the following syntax (assuming that you want the AD to be 90): ip route 0.0.0.0 0.0.0.0 w.x.y.z 90 You can decrease the AD of EIGRP using to 1 (assuming you still want exterior routes to be 170) using following syntax: router ei

Re: Proxy [7:70959]

2003-06-20 Thread Tom Martin
Olugbenga, You didn't say what kind of proxy. I'm going to guess that you are referring to a transparent web proxy. TCP port 80. Use policy-based routing to redirect web traffic to the transparent proxy. - Tom OLUGBENGA BANKOLE wrote: > Please does anyone know which port that Proxy requests r

Re: Proxy [7:70959]

2003-06-23 Thread Tom Martin
Gbenga, Proxy Server 2.0 was the last version released before ISA server, and it did not support transparent proxy. Supporting transparent proxy is important here, since the HTTP header for a proxy request will always contain certain lines (such as "Host:"), whereas direct HTTP 1.0 requests ma

Re: Transporting Multiple Vlans over point-to-point [7:71074]

2003-06-23 Thread Tom Martin
Alaerte, I can think of a couple ways to doing this. Be forewarned. Both are ugly. Method #1: Relocate the servers /30 subnet -- We'll say the server's IP address is 192.3.3.254/24. Create a secondary IP address on R2 for 192.3.3.252/30. R2's secondary ad

Re: VoIP+QoS+xDSL+H.323Gatekeeper [7:57121]

2002-11-08 Thread Tom Martin
Mark, It sounds like the voice traffic is being prioritized correctly since the voice is "rock solid" after the connection is made. Looking at your config this is strange as the default IP Precedence should be 0 for voice traffic and I do not see where you have specified this in your dial pee

Re: CCIE R &S LAB [7:57050]

2002-11-09 Thread Tom Martin
Charles, You can get the information from Cisco's web site using the following URL. It requires a CCO user account to access it though: http://www.cisco.com/en/US/partner/learning/le3/le11/learning_ccie_resource_guide.html#18 Relevant verbage in case you to not have a CCO account: 18. Lab Exa

Re: How RIPv1 masks are determined - confused [7:57049]

2002-11-09 Thread Tom Martin
Robert, I believe that your diagram should reflect R1's serial interface to R2 as s0/1 instead of s0/0. This caused me some confusion in trying to figure out the configs. Actually, there is still some confusion given the a duplicate IP (172.16.66.1) assigned to both routers on that serial link

Re: Slightly off Topic PIX [7:56994]

2002-11-09 Thread Tom Martin
David, Absolutely. When specifying the translation commands, instead of specifying a full IP translation just specify the port. For example, assuming you wanted your public IP (12.12.12.12) to redirect HTTP traffic to 192.168.0.1 and HTTPS traffic to 192.168.0.2: static (inside,outside)

Re: Question about multicast [7:57423]

2002-11-25 Thread Tom Martin
Dovelet, Use a static MAC address: (config)# mac-address-table 01.00.5e.11.22.33 fastethernet 0/1 fastethernet 0/2 fastethernet 0/3 vlan 1 Just make sure that the MAC address correctly represents the multicast IP. I chose the MAC address for 224.17.34.51, mainly because I'm not particularly

Re: IP Multicast [7:71577]

2003-06-30 Thread Tom Martin
rbx10, 224.0.0.0-255 multicast addresses are translated into L2 addresses the same way as the rest of the multicast addresses. For Ethernet, the MAC address becomes 0100.5e followed by the last 23 bits of the multicast IP address. Take 224.0.0.1. Last 23 bits are 000 0001. Tra

Re: Multipoint cost [7:71619]

2003-06-30 Thread Tom Martin
Mohamed, OSPF calculates costs based on interface bandwidth, each router assigning the link cost based on its idea of the bandwidth. For multipoint the costs for a link may be different depending on which router it is being viewed from. - Tom Mohamed Saro wrote: > How can the router calculate

Re: IP Multicast [7:71577]

2003-06-30 Thread Tom Martin
rbx10, 224.0.0.0-255 multicast addresses are translated into L2 addresses the same way as the rest of the multicast addresses. For Ethernet, the MAC address becomes 0100.5e followed by the last 23 bits of the multicast IP address. Take 224.0.0.1. Last 23 bits are 000 0001. Tra

Re: What Hardware do I need? [7:71712]

2003-07-07 Thread Tom Martin
Justin, The lab I use is at work, and I need remote access to it to do labs at home. I use a Linux PC with a Moxa PCI serial port card (8 serial ports). With the 2 built-in serial ports, I can connect to 10 Cisco devices. I have users set up so that when user R1 logs in via SSH the console win

Re: Cisco catalyst 3548 and Radius [7:71991]

2003-07-07 Thread Tom Martin
Robert, Kind of annoying isn't it? I looked a while ago and the short answer was it's not there and you can't do it. Some quick checking on Cisco's site showed that they might finally have released it in newer code though: http://www.cisco.com/en/US/partner/products/hw/switches/ps637/prod_relea

Re: Standard ACLs and distribute-list [7:72253]

2003-07-15 Thread Tom Martin
Fred, If the access-list were applied as an inbound or outbound interface filter, it would match a single host. Since the access-list is being applied using a distribution list it doesn't match just a single host -- it matches the network 131.108.0.0 and must match every bit exactly. It wouldn

Re: Standard ACLs and distribute-list [7:72253]

2003-07-15 Thread Tom Martin
Comments are inline. Reimer, Fred wrote: >So would it match a network of 131.108.0.0/24? From what Cisco says, that >it matches the classful mask if none is specified, it should not match. >From what you say it sounds like you think it would match. > > An access-list with wildcards (131.108.0

Re: cisco IOS [7:72454]

2003-07-17 Thread Tom Martin
KW S, You need to obtain Smartnet on the routers. Once you do you will get a CCO and download access. Contact your local Cisco partner for more information: http://tools.cisco.com/WWChannels/LOCATR/jsp/partner_locator.jsp - Tom KW S wrote: > Dear all > > Does anyone know where I can download

Re: Static Routes and Administrative Distance [7:72495]

2003-07-17 Thread Tom Martin
John, The behavior changed with the IOS releases. Newer IOS releases with static routes pointing to an interface will have an administrative distance of 1, not 0. Older versions will have an administrative distance of 0. Unfortunately I do not know the exact release in which the behavior chang

Re: ODR, was RE: CCDA: changes in syllabus. [7:72380]

2003-07-21 Thread Tom Martin
John, I have come across ODR in production a couple of times. Up until recently I had thought that ODR worked quite well for hub and spoke topologies... My most recent involvement with ODR occurred when replacing a 2621 with a 3745, which was the hub of the hub-and-spoke topology. I quickly l

Re: Why ppp encaps at physical as well as dialer int? [7:72440]

2003-07-21 Thread Tom Martin
Greg, The configuration on the dialer interface is used when making outbound calls. When an incoming call comes in, it isn't associated with a specific dialer interface. If you don't specify the encapsulation on the interface any incoming calls will be treated as HDLC. - Tom Greg Kirkness wro

Re: Help PLEASE FAST [7:72603]

2003-07-21 Thread Tom Martin
Describe how your clients lose their network connection. Do IP pings fail? Does DNS lookups fail (say, pinging www.google.com)? Do server shares become unreachable? Is network neighborhood not working? It also would be very helpful to get a network capture during the problem. If you don't alrea

Re: How do I check if load balancing works ? Catalyst 2900 and [7:72700]

2003-07-21 Thread Tom Martin
Chris, Since you are choosing the link based on MAC addresses and only one switch LED is blinking, is your test traffic to stations located across a router? The router will obviously have a single MAC address, so EtherChannel based on MACs will use only a single link. Perhaps you should change

Re: 1601 flash card. [7:72560]

2003-07-21 Thread Tom Martin
Johan, Sure! Linux has the ability to read and write various flash types and formats. I did something very similar a while back, albeit not with a 1600. There's a really good chance that your Linux system will pick up the flash, but not necessarily "out-of-the-box". I had to recompile my kerne

Cisco menu logins [7:72931]

2003-07-24 Thread Tom Martin
A couple of days ago I came across a new (to me anyway) Cisco feature, menus. So naturally I configured a router with menus to see how it works... Everything seems to work fine, except the login option. When Telneting to this router, I use the username and password as specified within the confi

Re: Cisco menu logins [7:72931]

2003-07-24 Thread Tom Martin
email, and should immediately delete it from your computer. > > >-Original Message- >From: Tom Martin [mailto:[EMAIL PROTECTED] >Sent: Thursday, July 24, 2003 9:47 AM >To: [EMAIL PROTECTED] >Subject: Cisco menu logins [7:72931] > >A couple of days ago I came across

Re: What protocol win? [7:73152]

2003-07-29 Thread Tom Martin
Pichit, Both routing protocols will learn about the networks. Neither routing protocol will be responsible for placing the routes in the routers routing table -- the administrative distances of the routing protocols are both higher than the administrative distance of a directly connected inter

Re: Gigabit Copper Switch [7:73116]

2003-07-30 Thread Tom Martin
Don't forget that you are still limited by the Cross-stack maximum speed. You won't be able to get 90-Gbps across the 32-Gbps stack "backplane". Ismail Al-Shelh wrote: > Hi chuck, > > I think they cisco mentioned it officially , yesterday I read some > documents about the 3750 , and I found th

Re: Back to Back Routers [7:73897]

2003-08-12 Thread Tom Martin
Keep in mind that neither the 1601 or the 2509 are beefy routers. You may be hitting a practical limitation. You may want to verify that CEF is enabled (or at least fast switching if CEF isn't supported). How does your router CPU utilization look? Paul Carter wrote: > I have a 1601 router and a

Re: 3500XL - duplicate IP and Windows NT/2000 server [7:73868]

2003-08-14 Thread Tom Martin
As far as the duplicate MACs go, it sounds like you have a layer-2 loop. Especially considering that all of your servers are experiencing the problem. When they ARP to verify that no other station has their IP, they see their own ARP and assume that another station is doing the same thing. Lay

Re: 3500XL - duplicate IP and Windows NT/2000 ser [7:73868]

2003-08-14 Thread Tom Martin
Oops, I read the post as if the MACs were duplicated. I have also come across a situtation where a faulty station (Wyse terminal actually) responded to all ARPs as if it owned the IP. I had an interesting conversation with Wyse support who remained convinced that it was impossible for their ter

Re: Back to Back Routers [7:73897]

2003-08-14 Thread Tom Martin
Keep in mind that neither the 1601 or the 2509 are beefy routers. You may be hitting a practical limitation. You may want to verify that CEF is enabled (or at least fast switching if CEF isn't supported). How does your router CPU utilization look? Paul Carter wrote: > I have a 1601 router and a

Re: in FECN [7:74642]

2003-09-02 Thread Tom Martin
The FECN bits are getting set, so traffic from the remote router (to your router) is experiencing congestion somewhere within the Frame Relay cloud. There's not really much you or your router can do about it. FECNs are sort of useless since by the time your router sees them the congestion has alrea