Follow-Up: 6509 Power Supply Swap -- No Swap? [7:75136]

2003-09-09 Thread COULOMBE, TROY
Just thought I'd follow up ::: we did it::: hot-swapped-upgraded power supplies w/o any down time. http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/6000hw/6000_ ins/01over.htm -Original Message- From: COULOMBE, TROY Sent: Tuesday, September 02, 2003 5:57 PM To: [

6509 Power Supply Swap -- No Swap? [7:74695]

2003-09-03 Thread COULOMBE, TROY
Has anyone successfully HOT-SWAP-upgraded power supplies on a 6509s. In other words::: Pwr-A is 1300 watts Pwr-B is 1300 watts Pull out Pwr-A; XXX Pwr-B is 1300 watts replace it w/ a 2500 watt pwr supply; so you now have::: Pwr-A is 2500 watts Pwr-B is 130

6509 Power Supply Swap -- No Swap? [7:74695]

2003-09-02 Thread COULOMBE, TROY
Has anyone successfully HOT-SWAP-upgraded power supplies on a 6509s. In other words::: Pwr-A is 1300 watts Pwr-B is 1300 watts Pull out Pwr-A; XXX Pwr-B is 1300 watts replace it w/ a 2500 watt pwr supply; so you now have::: Pwr-A is 2500 watts Pwr-B is 130

Wed's funnies [7:73251]

2003-07-30 Thread COULOMBE, TROY
There is a url... Just me searching for catos software... http://www.cisco.com/cgi-bin/Support/browse/index.pl?i=Software%20Produc ts&f=841 Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=73251&t=73251 -- FAQ, list archives, a

RE: ????DHCP Problem???? [7:71667]

2003-07-02 Thread Troy Leliard
It also depends on how your ISP is assigning IP addresses My Cable provider only assigned IP's to registered MAC addresses. In this case you can either register you E1 mac address with them, or you can spoof a registered mac address. Below is a snipet of one of my routers spoofing a MAC address

Re: CSS Switches... [7:71292]

2003-06-25 Thread Troy Leliard
I have a couple in production and ssl sticky does indeed work !! Herlocker, Tim wrote: > Hi, > > Just wondering if anybody has worked with the CSS 11000 switches at all. We > are looking at purchasing one or two but would like to make sure SSL sticky > works on them first > Thanks in advance!

Re: Multiple Default Routes [7:70914]

2003-06-20 Thread Troy Leliard
Using a next hop of an interface or IP address does have slightly different behaviour. Using an interface as the next hop actually giev the route an AD of 0 (ie a directly connected route), while that pointing to an IP has an AD of 1. Small, but significant differences, especially when redist

Re: Proxy [7:70959]

2003-06-20 Thread Troy Leliard
nd to your network.) Just do a search for WCCP on cisco. Cheers Troy Tom Martin wrote: > Olugbenga, > > You didn't say what kind of proxy. I'm going to guess that you are > referring to a transparent web proxy. > > TCP port 80. Use policy-based routi

RE: OSPF over FR [7:70025]

2003-06-03 Thread Troy Leliard
Hi Catherine, Because you are using point to point sub interfaces on the one routea and one the other just using the real interface, OSPF behaves differently and has different helo / dead timers etc, and this is why you are not getting all your routes. You need to make sure that all ospf interfa

RE: PIX access-list [7:70022]

2003-06-03 Thread Troy Leliard
Silly thing to overlook, but best to check anyway is that you have applied the ACL to the correct interface Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=70053&t=70022 -- FAQ, list archives, and subscription info: http://www.group

Re: Multiple VLANs in a single switch port [7:69991]

2003-06-03 Thread Troy Leliard
Ofcourse you can only use the mswitchport mode multi if you dont have a trunk already... if you do you get the error Command rejected: One or more ports is already configured as a trunk port. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=70006&t=69991 --

Re: PIX 6.3 [7:69876]

2003-06-02 Thread Troy Leliard
I've recently upgraded to 6.3 with no problems...I would echo Madman and say not a great idaea to use conduit and ACL's ... Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=69974&t=69876 -- FAQ, list archives, and subscription info:

RE: Encapsulation PPP not working on some Cisco ro [7:69855]

2003-05-31 Thread Troy Leliard
Make sure that your PPP auth is set correctly (or not at all). Also make sure that you are not using AAA for network. I found that when I added this the PPP would try and auth against it. Can you post configs ? Marakalas wrote: > > Hi All > > Has anyone ever encountered a problem of configur

Re: question on operational efficiency of vpn's [7:69739]

2003-05-30 Thread Troy Leliard
I've also run into something similar when I was using encrypted GRE tunnels, where both GRE and IPSec add overhead. However in this case it is slightly more complicated as the you can not use MTU path discovery and have to manually decrease MTU size. Reason for using gre with Ipsec .. to remote s

RE: Dynamic Route Graphs...... [7:69738]

2003-05-30 Thread Troy Leliard
Tried to d/l but got connection refused. homer:/local% wget http://mlp-consulting.com.au/Cisco-ShowIPRoute-Parser-1.01.tar.gz --09:51:41-- http://mlp-consulting.com.au/Cisco-ShowIPRoute-Parser-1.01.tar.gz => `Cisco-ShowIPRoute-Parser-1.01.tar.gz' Resolving mlp-consulting.com.au... don

RE: uBR-924 VoIP Phone [7:69477]

2003-05-30 Thread Troy Leliard
I would think that the uBR is about the cheapest entry you could get (you can pick them up off ebay for about £60). The uBR has 2 "phone" ports each, but my understanding is that one of these would normally connect to a standard PSTN port, that way if you have an IP outage you will still have a "b

RE: Two ISDN BRI interfaces back to back [7:69540]

2003-05-30 Thread Troy Leliard
The other option it to buy and old PBX, normally cheaper than an ISDN simulator, and then you can do it "for real". I have seen a couple on ebay for £200-£300. This would also allow you to do VOIP, etec Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=69659&t=69540 -

RE: Am I over my head guys? [7:69746]

2003-05-29 Thread Troy Leliard
I would definitely say go for it ... thre isn't much to "basic" or even intermediate LAN switching and IO am sure you will be able to cope. Just have confidence in yourself, and while you are getting used to the environment, just be very throughtful about each command you enter. I still often ope

RE: Dynamic Route Graphs...... [7:69738]

2003-05-29 Thread Troy Leliard
Looks ok to me, but as always .. I would look through the code first. Presumably it logs on to the router using standard vty / telnet. (does it require enable ?), I am alway wary of inputing these details into a 3rd party program unless I can proof read the code. Even then I would probably cre

RE: Virtual Link Problem [7:69640]

2003-05-28 Thread Troy Leliard
Dont really have time at the moment to look into this, but something that you may want to investigate is the different LSA adverts sent out by different interface types in OSPF. Depending on the type of interface OSPF behaves different;y, ie different HELO timers, differnet DEAD timers etc. You n

Re: port/duplex configs [7:69582]

2003-05-28 Thread Troy Leliard
I have seen this too, and like Ian I would normally go with 100/Full manually configured on botht he Cat and the end device (obviously assuming both devices support this settings). In real life, I have often found that setting the cat to Auto will often lead to duplex / speed mismatches (especiall

RE: CCIE Home Lab [7:69580]

2003-05-28 Thread Troy Leliard
i agree with Jeff, try and get slightly newer kit if you can, or anything that will at least run 12.2. Nothing wrong with the 4000 tho, if you are using it as a FR switch. jeff sicuranza wrote: > > do not bother with any 2500 series if you are starting out now. > IOS improvements and requriement

Re: BGP Load Balance [7:69611]

2003-05-28 Thread Troy Leliard
Folllowing on from everyone else, we often make use of loopbacks for internal peering, that way you will always have redundant paths to iBGP peers, however when peering with external peers / isp we make use of the external facing interface ip. Message Posted at: http://www.groupstudy.com/form/r

RE: IP route to Null0? [7:66755]

2003-04-04 Thread Troy Leliard
Well loads of answers already, but my £0.02-> Routes to null can be used to blackhole traffic with lower overhead that an ACL, but obviously with less granuality. You could also use routes to null for redistribution, I have used this in the case of EIGRP when I wanted to redistribute static routes

RE: Question about the Revised R&S CCIE Writte [7:66715]

2003-04-04 Thread Troy Leliard
When I wrote in November pass mark was 58%, 150? and 3 hours! [EMAIL PROTECTED] wrote: > > when i failed in november, it was 150 questions/3 hours/58% > pass mark > > -Original Message- > From: alaerte Vidali [mailto:[EMAIL PROTECTED] > Sent: Thursday, April 03, 2003 6:58 AM > To: [EMA

RE: WIC 2A/S working at speeds greater than 128kbp [7:66733]

2003-04-03 Thread Troy Leliard
You are correct, the card can aggregate the dandwidth as long as you dont use the second port .. you can also do this on 8 port sync/async cards...have used this for high speed frame-relay ! Andrew Larkins wrote: > > I noticed the same thing. From my understanding it works great > but the > prob

RE: PAT AFTER NAT (confused) [7:66734]

2003-04-03 Thread Troy Leliard
You should be able to use your normal pool and overload command, eg ip nat inside source list 1 pool POOL overload, You pool, for eg is 192.168.0.60->10.168.0.99, then the first 39 IP's would be used for NAT, and the last will be use for PAT =?iso-8859-1?q?ciscoGo2002?= wrote: > > Hello friend

RE: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-02 Thread Troy Leliard
Yes it can be done, you just need to redefine you pool, for 1-1 nat, use all but 1 of your available IP's, then do another nat with overload on the last ip address. =?iso-8859-1?q?ciscoGo2002?= wrote: > > Hello folks, > I have question for you, we want to do dynamic NAT > with a pool of 128 publi

RE: pathping question [7:66601]

2003-04-01 Thread Troy Leliard
Not necessarily, it could just mean that ICMP replies are disabled. Traceroute doesn't use the same mechanism as ping, and thus traceroute will give you end to end connectivity, but by trying to get response times using ICMP ping wont work as many people disable this. (Meant to minimise reconaissa

RE: Advanced NAT problem [7:66562]

2003-04-01 Thread Troy Leliard
ONe would hazard a guess ... when you initiate you orginal ping a nat translation is built using the outside address of your leased line, when you pull ou the leased lin cable, this translation is still present and that is why you pings are failing. By tearing down the connectiong and restarting y

RE: What tools can tell u r using lease line or IS [7:66561]

2003-04-01 Thread Troy Leliard
Something like Nagios / big brother would be able to alert you (these products are free and very usefull) Link Teo wrote: > > I am using leased line to connect my remote offices to HQ. All > the leased line are backup by ISDN. Is there any tools which > can inform me via email or other means abou

RE: OSPF Adjacency Question [7:66206]

2003-03-31 Thread Troy Leliard
twork x.x.x.12 0.0.0.3 area 1. Try doing a debug ospf and post the output from that .. may provide more insight. Cheers Troy CiscoNewbie wrote: > > Hi all. my cisco router keeps reporting this error when trying > to bring up an adjacency accross a P2P link. > > OSPF: Rcv pkt

RE: OSPF Adjacency Question [7:66206]

2003-03-27 Thread Troy Leliard
twork x.x.x.12 0.0.0.3 area 1. Try doing a debug ospf and post the output from that .. may provide more insight. Cheers Troy CiscoNewbie wrote: > > Hi all. my cisco router keeps reporting this error when trying > to bring up an adjacency accross a P2P link. > > OSPF: Rcv pkt

RE: regulations [7:66267]

2003-03-26 Thread COULOMBE, TROY
I would suggest your legal dept. for DEFINATIVE answers... however, this might get you started::: http://www.sans.org/rr/legal/ hth, TroyC -Original Message- From: Stull, Cory [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 26, 2003 9:42 AM To: [EMAIL PROTECTED] Subject: regulations [7:

RE: Log files [7:66070]

2003-03-25 Thread Troy Leliard
There are limited log files saved on the router. Since their is no hDD > On Cisco routers and switches are there log files? How do I > view them? > > Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=66121&t=66070 -- FAQ, list arc

RE: Natting problem...help!!! [7:66111]

2003-03-25 Thread Troy Leliard
You could get around this by doing a two way nat, or as cisco calls it, nating for overlapping networks .. http://www.cisco.com/en/US/tech/tk648/tk361/technologies_configuration_example09186a0080093f30.shtml JP wrote: > > I have the following scenario > > 0---0-

RE: any other listserver for discussing Cisco rela [7:66081]

2003-03-25 Thread Troy Leliard
There is another forumm, @!#$.com :) [EMAIL PROTECTED] wrote: > > Hi Listers: > > Are there any other listserver for Cisco related issues? > > Thanks > > YC > > Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=66123&t=66081 -

RE: Network Management Software whats hot and what [7:66099]

2003-03-25 Thread Troy Leliard
Depends on your budget, what growth and what reporting functionatily you want. From one extreme you have HP Openview, netcool etc, all the way down to something like Nagios / Big Brother etc? Chris Penrose wrote: > > Does anyone have any good advice on choice of network > management/monitoring s

RE: 1720 crashing every week [7:66080]

2003-03-25 Thread Troy Leliard
Another thing that you may want to do is to condigure ftp crashdump. Basically with the router crashes, it will dump logs / error etc onto a ftp servr. I have found this quiet uesfull when trying to debug random router crashes neil K. wrote: > > Hi Folks, > > I got two 1720's connected with a

RE: Farm Site [7:66090]

2003-03-25 Thread Troy Leliard
Look ok to me, just a pity that there isnt a CIP card for the 6509 chassis :) [EMAIL PROTECTED] wrote: > > This is a network requirement: > > It is a Farm Site, with Channel interfaces, connection to > Mainframe (OSA > FETCH and OSA ATM), > 215 other server (Windows 2000 and Unix) and 31 serial

RE: NAT overload as security [7:66015]

2003-03-24 Thread Troy Leliard
A couple of reasons why its not enough .. imagine you inadvertently run and execute a trojan on your home pc. This will then connect out to the internet and would be valid remote control access. Often these trojans head out to IRC, where peolpe can actually access / manage your computer user var

Re: VLAN as Firewall zones [7:65938]

2003-03-24 Thread Troy Leliard
Whie I agree that by compriming the switch, the intruder can bypass the firewall, I dont feel that it is of siginificant concern to warrant the purchase of an addiitianal switch to seperate the two. The big drive here is that you must secure your switch at L2, and if you do so, I feel that is is p

RE: CCIE switch suggestions [7:65904]

2003-03-21 Thread Troy Leliard
Good thing I asked .. Oh well, back to the original question .. where can i find a cheap 3550 ?? hehehe Orlando Palomar Jr CCIE#11206 wrote: > > Troy Leliard wrote: > > > > Correct me if I am wrong, but does the CCIE have a IOS based > > switched or a CatOS? I thought

RE: eBGP Multi-hop [7:65823]

2003-03-21 Thread Troy Leliard
A default route, aka a route of last resort. For BGP, route to the next hope must be explicitly in the routing table. This is one of the pre-reqs for BGP to advertise its own routes as well (unless you have synchronisation turned off). In my deployments of BPG, we alway suse the loopbak interfac

RE: What is shared VC and dedicated VC ? [7:65896]

2003-03-21 Thread Troy Leliard
A PVC is a virtual point-to-point circuit, that is established, data flows and then lays in an idle state waiting for more data etc. a Switched virtual circuit, is torn down after the data is sent, and then re-established when more data is required to be sent. dkshin wrote: > > What is differenc

RE: CCIE switch suggestions [7:65904]

2003-03-21 Thread Troy Leliard
Correct me if I am wrong, but does the CCIE have a IOS based switched or a CatOS? I thought it was CatOS > I know this question probably has been asked here before, so > forgive me. I > already have three routers (2x2514 and a 2509) and a Catalyst > 1900 in my > home lab. I want to get a switch th

RE: Success with Livingston PortMasters? [7:65675]

2003-03-19 Thread Troy Leliard
Ihave previously used the PM2's as a terminal server, to connect to both Sun and cisco equipment and it worked fine. They are ofcouse quiet a lot larger than the 2500's?, probably about 3U Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=65730&t=65675

RE: Can PIX redirect a packet from its outside in [7:65484]

2003-03-18 Thread Troy Leliard
I dont think this solution would work. You outisde address and the host 2 address I presume are on the same subnet? Why would you want to vpn from a device that is on your outside network anyway ? [EMAIL PROTECTED] wrote: > > Hi, > > This must be an easy one for the PIX experts. > > I have a

RE: frame relay and leased line [7:65397]

2003-03-14 Thread Troy Leliard
FR is usefull when youhave hub and spoke deployments. By making use of shared circuit your bandwidth costs are normally a lot less thatn Leased lines. Another solution would possibl the use of VPN. WIth the price of broadband coming down, you could probably have a broadband connection at the rem

RE: Final stretch to CCSP [7:65304]

2003-03-14 Thread Troy Leliard
To many late nights watching the cricket perhaps? LOL. What reference material did you use to prepare. I too am looking to upgrade from CSS1. Andrew Larkins wrote: > > Bad news all - failed. I got 803 from the required 825. > > Comments: > Another nasty exam comparable to the old design (CCDA

RE: ISDN Config Problem? [7:65315]

2003-03-14 Thread Troy Leliard
You should definatley be getting output from debug isdn Q921 . This in effect is the D=Channel connectivity to the ISDN switch, and should always be up. If you are not getting SPI's when you debug this, then there is definatley a connectivity issue between your router and the ISDN switch? You al

RE: Frame Relay Design/Bandwidth Question [7:65401]

2003-03-14 Thread Troy Leliard
FR relay is quiet effective, especially with hub and multi-spoke deployemnts. One of the big advantages as well, reducing interface costs on the Hub end, as you onely have one serial interface with multiple FR PVC's? A further solution is to have a xDSL / Cable installation at the remote sites, an

Re: sniffer in Wan interface [7:65149]

2003-03-12 Thread Troy Leliard
I dont think you can do it with out some form of in-line analyser? kuma kk wrote: > Hi Group, > > Is there any way to capture the traffic on a WAN link using the sniffer > software. I am able to capture the traffic on Ethernet connecting Router and > Switch port by mirroring the port. > > Appre

RE: Good book for CCIE Written Prep [7:65104]

2003-03-12 Thread Troy Leliard
I think you should be asking good books? :) I am currently using Bruces Caslows, Routing and Switching, New Cisco Press CCIE book, and the Cisco Press CCIE - Practical Book. I think the best way to tackle the "big one" is to start a file yourself, an in it have a chapter for each topic that appe

OT: Posting directly from news client [7:65061]

2003-03-11 Thread Troy Leliard
A bit off topic, but wondering if any of you send posts directly to this group through you nntp clients? I have tried (using mozilla mail& news) and am failing. At the moment I have to nake all my posts via the WWW front end. Any ideas, recommmendations! Message Posted at: http://www.groupst

Re: Load Balancing and NAT [7:64904]

2003-03-10 Thread Troy Leliard
Hi Terry, I think I have already responded to a similar, if not the same question. You wont be able to use NAT, as you can have a many-to-one NAT statement on your router. IE Qwest IP and Sprint IP, both NAT to the same server. The only way I can see you getting this working is if you get a /3

RE: Load Balancing and NAT [7:64904]

2003-03-10 Thread Troy Leliard
First big question, are your T1's from the same provider, or from a different provider, and thus different "public" ip address space? If it is from a different provider, you may well run into some problems with NAT. Say for example, client A connects to your webserver (via ISP A's public IP addre

RE: MAC Access Lists - Canonical or NonCanonical [7:64754]

2003-03-10 Thread Troy Leliard
I guess this would depend on the media / interface that you are applying the ACL to? EG for TR, you would use non-canonical, and if applying the address to ethernet interface canonical. Presumably, inbound packets from TR pass "through" any inbound ACL's, then get converted to canonical and passe

RE: Traceroute (kind of O/T) [7:64637]

2003-03-07 Thread Troy Leliard
You can always query ARIN or RIPE whois database. Jim Devane wrote: > > hi, > > i am wondering if anyone knows how the route is able to provide > the AS in a traceroute. I figure that it is querying it's own > BGP table, kinda doinga mini-"sh ip bgp x.x.x.x" sort of deal. > > the reason I am a

RE: it started out as a really good idea [7:64636]

2003-03-07 Thread Troy Leliard
Looks like you have it configured correctly, and that they are forming "adjacencies". At the risk of offending, but always best to start right at the beginning, the gateway on your hosts are set to the HSRP address correct? When you unplug any of the 4 cables, you can no longer ping the either s

Re: "Extra" IP addresses for VLANs? [7:64570]

2003-03-06 Thread Troy Leliard
Could be that you have directed broadcast enabled. The Long and Winding Road wrote: > > ""Mossburg, Geoff (MAN-Corporate)"" > wrote in > message news:[EMAIL PROTECTED] > > I'm full of questions tonight... > > My company's Catalyst 6509's MSFC has VLANs configured with > IP addresses > in > > the

Re: Many Vlans [7:64569]

2003-03-06 Thread Troy Leliard
Just a side note . .you can't use pvlans on vlan 1 (management vlan). I have gone to a number of customer sites, where often they have just used vlan 1 to put some of their servers on, and thus run into these sort of comlications later! Ken Diliberto wrote: > > This sounds like a job for priva

RE: Question about custom queuing [7:64516]

2003-03-06 Thread Troy Leliard
Yes you can, Do a search on IRB and CRB. James Gosnold wrote: > > Excellent, thanks Priscilla. > > Can you configure a router to be a bridge AND a router? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=64611&t=64516 -- FAQ, li

Re: Password recovery without reload? [7:64453]

2003-03-06 Thread Troy Leliard
You can always try a brute force password attack. Solarwinds have some apps that do this, (that you can get on 30 day trial too ) M.C. van den Bovenkamp wrote: > > oscar wrote: > > > SNMP is not an option because it is disabled. In fact the > > startup-configuration wasn't erased by mistake. The

RE: Limiting bandwidth [7:64592]

2003-03-06 Thread Troy Leliard
You could use some form of policy routing ! Stuart Pittwood wrote: > > Is it possible to limit the amount of bandwidth used for > traffic sent > from 10.1.1.2/16 to 10.3.3.x/16 if so how would I go about this > > > > Thanks > > > > Stu > > Message Posted at: http://www.groupstudy.com/

RE: Question on BGP aggregation [7:64581]

2003-03-06 Thread Troy Leliard
Strange that you would want to sumarise from an EBGP ro iBGP,, nomrally the other way around :) . Withought using summary address command, you could inject the /22 route into your local router table (eg route to null0 with high metric), then have a distribute list which filters out any more specif

RE: Cisco Secure - ISDN error [7:64577]

2003-03-06 Thread Troy Leliard
Not 100% sure if this is a full authentiaction error, but am alarmed by the protocol=cdp section. I would guess that your dial list doesn't allow CDP ??/ Just a thought # Ants wrote: > > Hi, > we have an ISDN dial in site setup and getting following error > every couple > of minutes.. > this sit

RE: PIX firewall port redirection [7:64533]

2003-03-06 Thread Troy Leliard
Hi Robert, Your first static line wont work .. if you think about it, you will be trying to pass an IP address (which the pix thinks is on the inside interface), in from the outside interface. The Pix will see this as spoofing and drop the packet. What are you trying to achieve ? Robert Pere

RE: Multiple WAN Connections to a Network [7:64469]

2003-03-06 Thread Troy Leliard
True, getting a AS for a /27 could be quiet a challenge, and even harder trying to convince your bgp peers to advertise that. Fortunatley, I know play with a /16 and a /19. BUt when I was contracting for another compnay, I managed to get an AS for a /24, and get our peers to advertise it (was fac

Re: OSPF into RIP redistribution [7:64502]

2003-03-06 Thread Troy Leliard
Yup, I think we have just come off a big thread of RIP and OSPF redistribution! With the risk of sparking it all off again, the main issue is that RIP (v1) is classefull while OSPF it not. IE RIP doesn't pass subnet mask prefixes in its updates! Cheers John Neiberger wrote: > > The first step

Re: Multiple WAN Connections to a Network [7:64469]

2003-03-05 Thread Troy Leliard
If I follow, you have two wan conncetions providing access to you server farm. Some of the servers on this farm will have 2 public IP address, one from each of your providers? Presumably you aren't of a large enough size to warrant applying for you own AS, and using BGP,m which is the preferred so

RE: TTY Background Process - Cisco 3620 [7:64465]

2003-03-05 Thread Troy Leliard
TTY are any async lines that you may have. Do a show line and see what is connected (if anything) to your tty lines? Cheers T Elizabeth McCord wrote: > > Hi there, > > Does anybody know what the "TTY Background" process does and > what it is > responsible for? > > Is it normal that such a pr

Re: Off Topic - just screwing around and what do I [7:64454]

2003-03-05 Thread Troy Leliard
Split Horizon for EIGRP ... dont think so. !!! Larry Letterman wrote: > > r3 sends to r2, then r2 sends back to r3.. > you sure about that...split horizon should be enabled for > eigrp and igrp..and igrp and eigrp will work together in the > same as number..not sure about different as #'s >

RE: 3000 Concentrator behind/in front or parallel [7:64383]

2003-03-05 Thread Troy Leliard
my case, vpn access is only used for telecommuters and as such, traffic it very low. If you had large amounts of traffic, I would consider putting it in parrallel with the Pix. Cheers Troy Chris Penrose wrote: > > Hi All, I am setting up a VPN to connect remote sites to a Head > Of

RE: Cisco 2501 DC Power adaptors ? [7:64296]

2003-03-04 Thread Troy Leliard
You need a RPS. It converts AC to DC and can be used for a number of chassis (2500,3600, 2950 etc) Not too cheap / or common (on ebay etc), but you may want a look! New DC power for the 2600 is just under £300. How many DC routers do you have ? Simon Watson wrote: > > Hi Guys I am based in th

RE: 2 questions [7:64263]

2003-03-03 Thread Troy Leliard
uot;higher" interface . If you want further details, let me know the answers to the above, and I will get back with partial config. Cheers Troy Sam wrote: > > 1) Do some private networks use public ip's sometimes in their > router > configurations,etc. Or is that rare? > &

RE: OSPF ISDN Demand Circuit [7:64221]

2003-03-03 Thread Troy Leliard
Hi Randy, You will need authentication for the BRI interface for OSPF area 0, an dyou definatley only need the deman circuit to be on one side, not both. What errors are you getting ? Presumaly since you are asking about passwods, I assume the BRI interfaces are not connecting? Have you config

RE: citrix session and VPN [7:64185]

2003-03-03 Thread Troy Leliard
Not sure about Citrix, but have run into MTU issues when using IPSec and GRE ... and did indeed have to drop the MTU size on the network to allow for the "double" encapsulation (GRE heard and IPSec header) Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=64251&t=64185 --

Re: Who likes BGP? [7:64123]

2003-03-03 Thread Troy Leliard
I think it is up to individual companies to be responsible for their own AS, and should filter what routes and AS's they accept from peers! Ideally we would want to "authenticate" our peers etc, but considering the expense etc in rolling out this sort of technology you could also make use of

RE: 7206 non-vxr [7:64083]

2003-02-28 Thread COULOMBE, TROY
Yep, and 128mb is the max mem... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Friday, February 28, 2003 7:21 AM To: [EMAIL PROTECTED] Subject: 7206 non-vxr [7:64083] Can some one please tell me what is the fastest NPE processor capable of running on a 7206

RE: Urgent Help !! How to check who's always attac [7:64064]

2003-02-28 Thread Troy Leliard
Your AARIN / RIPE whois, that should tell you who the IP block belongs to and where to direct abuse complaints! Steiven Poh-\(Jaring MailBox\) wrote: > > Dear All, > > I believe some one always try hacking my private network, > I got the ip address and how am I check who they are? > > Please h

RE: Looking for Used Cisco Equip's [7:64044]

2003-02-28 Thread Troy Leliard
Are you looking for new or 2nd hand? (With warranty / support ? etc )( Cheers Troy Steiven Poh-\(Jaring MailBox\) wrote: > > Dear Groups, > > I'm looking below used cisco item, please look in to it and let > me know asap. > My locat

RE: some question about frame-relay configuration! [7:63973]

2003-02-28 Thread Troy Leliard
signal from the FR switch. Start with the basics and debug your LMI and see if you are getting info back! Cheers Troy tigers zheng wrote: > > Hi,everyone: > I have a question about frame-relay!Please tell me why it > happened? > the topolofy :r1(s0)---(s0/0)r2(s0/1)---(s0/0)

RE: Cat4006 - Prompt [7:63984]

2003-02-28 Thread Troy Leliard
Try set prommpt "" or set prompt " " something like that .. :) Eagles Fan wrote: > > is it possible to clear the prompt after manually setting it? > > _ > Protect your PC - get McAfee.com VirusScan Online > http://clinic.mcafee.

RE: PIX VPN/IPSEC [7:64016]

2003-02-28 Thread Troy Leliard
rk to this "internal" addres, and visa versa, so you only need to include the VPN pool addresses in your ACL, of what traffic to envrypt! Cheers Troy [EMAIL PROTECTED] wrote: > > I have a question regarding the configuration of manual IPSEC. > I have to > create an access list t

RE: Conent Switching on LD416's [7:63846]

2003-02-27 Thread Troy Leliard
... mmm perhaps its time to do some LD416 tossing! :) Troy Leliard wrote: > > Hi there all, > > I've got a couple of Local Director's, and am trying to find a > way of doing intelligent "layer7) health checks of real > servers. eg for ftp, the LD will probe port

RE: RPC Endpoint Mapper [7:63916]

2003-02-26 Thread COULOMBE, TROY
t on your Sniffer if it still exists. What operating system are you talking about? Windows does RPC too but I don't know it very well. Priscilla COULOMBE, TROY wrote: > > Anyone know of a good resource on RPC endpoint mapper? I > trying to find > where in the packet the server tel

RPC Endpoint Mapper [7:63916]

2003-02-26 Thread COULOMBE, TROY
Anyone know of a good resource on RPC endpoint mapper? I trying to find where in the packet the server tells the client which [new] port to come back on. Using a sniffer, but I cant seem to nail down where in the payload the "future" port is passed to the client. a google search of "rpc endpoint

Re: Backup Site - 152Mbps [7:63866]

2003-02-26 Thread Troy Leliard
lar scenario, where I make use of a 3620, with 100FX, and 100TX interfaces, going to a 3548G-L3, and fom there into server / user vlans etc! Cheers Troy The Long and Winding Road wrote: > > wrote in message > news:[EMAIL PROTECTED] > > To build a backup server farm site (22 servers

RE: ADSL Between Head Office and Remote Branch [7:63711]

2003-02-26 Thread Troy Leliard
wiring in a back-to-back configuration. This back-to-back > scenario allows > two Cisco 828 or Cisco SOHO 78 G.SHDSL routers to connect > without a DSLAM or > IP DSL Switch between the units. > > Ismail Al-Shelh > > Thanks for to Troy, Skarphedinsson, Steve Wilson a

RE: BGP notification message [7:63847]

2003-02-26 Thread Troy Leliard
>From the cisco website Error Message %BGP-5-ADJCHANGE: neighbor [chars][chars][chars][chars] [chars] Explanation A BGP neighbor has either come up or gone down. This message describes the change for the BGP neighbor and appears only if the log-neighbor-changes command is configured fo

Conent Switching on LD416's [7:63846]

2003-02-26 Thread Troy Leliard
so we'll have a race and see who gets back first :) CHeers Troy Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=63846&t=63846 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.ht

RE: REdistrubution - Two way [7:63827]

2003-02-26 Thread Troy Leliard
ou can also use HSRP etc) I know I have gone one a bit, but it is quiet difficult to give any advice without knowing what the actual requirements are. As always, this above is just my thoughts! Hope this helps ! Troy Metla Venu Gopal wrote: > > Hi All > > In a single router can

RE: Bridging over point to point [7:63790]

2003-02-26 Thread Troy Leliard
Is your video delivery method unicast or multicast. If it is multicast you may need to enable m/cast routing. Terry Martin wrote: > > I have set up in my lab, bridging over a point to point T1. I > am now trying to pass video traffic over this link, and it is > not working. I can ping from a p

RE: Sniffer Software [7:63796]

2003-02-26 Thread Troy Leliard
Why not try ethereal .. its free!! PacketEXPERTS wrote: > > Have anyone gotten NetXray 3.0 or Sniffer Pro 4.5 to > work with XP. > > Thanks > > ___ > Sent by ePrompter, the premier email notification > software. > Free download at http://w

RE: Static Xlates on PIX [7:63638]

2003-02-25 Thread Troy Leliard
I think you will find that AH cannot be used with NAT. AH does a has on the entire packet, including IP SRC and DST, and NAT would modify this thus invalidatin the packet!. For VPN's that are behind a NAT device, be it a firewall, router or what ever, the transport mechanism would be ESP, or inde

RE: ADSL Between Head Office and Remote Branch [7:63711]

2003-02-25 Thread Troy Leliard
What you want to do is possibleinfact I demo'd something similar. I used the MXL-2300 from tut systems ... http://www.tutsys.com/mtu/products/ethernetworking/mxl_2300/index.cfm at anything under 3.5km you can get about 2MB. I haven't tried it this using any cisco kit, Ismail Al-Shelh wrot

RE: Performance monitoring [7:63729]

2003-02-25 Thread Troy Leliard
Hi Stuart, One of the easiest ways to gather this sort of info is to use something like MRTG (or even better Cricket, using RRD Tool). These free programs periodically gather stats from the router and store it. You can then query this data and it would draw nice pretty graphs showing you exact

Re: Strange problem with a 2924XL. [7:63680]

2003-02-25 Thread Troy Leliard
Hi Ken, What is connecting to this interface...you may want to manually configure the duplex and speed settings on this interface to match that of the device that is connecting to it. Also be very wary if you have a hub connected.!!! Let me know if this helps ! Troy Ken Diliberto wrote

RE: Core Layer L2 or L3 [7:63708]

2003-02-25 Thread Troy Leliard
n etc, should all be done on the distribution / access layers, leaving the core to be very efficient. Not sure if this answers your question, but just my 2cents on what I have dealt with in the past! Cheers Troy Skarphedinsson Arni V. wrote: > > In a Core-Distribution-Access Layer design

  1   2   >