RE: PIX DNS Issue [7:72685]

2003-07-21 Thread jhodge
You will have to use the alias command or static dns command to all translation from internal to external. CCO site has great examples of your situation. Cheers, Jamie -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Stevo Sent: July 21, 2003 11:27 AM

RE: Access list or Conduit? [7:72514]

2003-07-17 Thread jhodge
You can use the icmp permit to allow the icmp through. As well cisco recommends you allow unreachable through for SIP. By default all PIX interfaces will respond to icmp echo-reply. You must deny this with the icmp deny command. As well you can you a acl to apply to the icmp permit match acl

RE: Internet is very slow behind Pix 515E UR [7:70783]

2003-06-19 Thread jhodge
The new version of PIX 6.3(1) allows for the turbo acl to be activated for acl's longer than 19 lines. Look at turning it on and seeing if the latency decreases. Cheers, Jamie -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Wilson Sent: June 17,

RE: copying flash FROM PIX? [7:70731]

2003-06-18 Thread jhodge
If you have access for the new software, then just download the present Finesse OS as well. I do not believe a command exist to bring the code to a tftp server. I have recently upgrade to 6.3(1). You will have to download the newer PDM 3.1 as well. The present PDM you are running will not run

RE: cisco 2511 Terminal Server for my first time! [7:53791]

2003-06-18 Thread jhodge
I would highly recommend you use the ip host command for your telnet connections. Bring down the possibility of fat fingering the keyboard. You should configure the loopback ip address for the reverse telnet E.g. --- conf term interface loopback 0 ip address 192.168.1.1

RE: Liming netbios connections [7:70883]

2003-06-18 Thread jhodge
You could use traffic-shape command interface serial 1 traffic-shape group 101 128000 16000 8000 You must calculate the bit-rate that is suitable for your medium. The group 101 relates to access group. In your case you can have all networks Access-list 101

RE: Passed CID 3.0 Test [7:62536]

2003-02-07 Thread jhodge
Curious about this test, did it include the IPX and Appletalk? I completed the CCDA last week and it had IPX and appletalk questions. Cheers, Jamie -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Joseph R. Taylor Sent: February 5, 2003 1:00 PM To:

RE: RE: : Influencing EIGRP to use GRE tunnels over Serial link [7:60888]

2003-01-11 Thread jhodge
Thank you for all that responded to this. Found out that I had to influence the route using the bandwidth and delay properties to change the primary route to MPLS instead of the frame relay link. Cheers, Jamie -Original Message- From: Amar KHELIFI [mailto:[EMAIL PROTECTED]] Sent:

RE: Possible Attack???? [7:59813]

2002-12-27 Thread jhodge
Not sure if this will help, but you could enable ip accounting on the uplink interface to the switch. Watch for the address that is pouring out the most requests. Then use sho ip arp x.x.x.x to find the mac address. From there you could go to the switch and do a show cam dynamic or if IOS