Re: VLAN as Firewall zones [7:65938]

2003-03-21 Thread neal r
We deploy 2620/2621 in our microwave network with Catalyst 1912/1924 to 'fan out' via VLANs, but we just use the aux port on the 26xx to reverse telnet to the 19xx, rather than assigning an IP address to the switch. I have seen several situations where ARP requests leak across VLANs on

Solved! MPLS images for 7200? 2500? [7:60284]

2003-01-07 Thread neal r
A couple of people answers - ftp://ftp-eng.cisco.com/rraszuk/specials has the three files mentioned, I got c2500-p-l.tag to load on a 16/16 2503, and I did see that mpls and tag-switching commands were available, but I haven't had time to dig any further. I am going to renege on my offer of an

Re: Aironet 350 Problems - VoIP over 802.11b [7:60552]

2003-01-07 Thread neal r
How far apart are the antennas? What antennas are you using? Is there any sheet metal in the area? ie building sides, a parking lot full of cars you're shooting over, etc. What sort of feed cable did you use? How long is the bridge to antenna run? Lost association means a lost beacon. You can

Re: Aironet 350 SSID Broadcast [7:60472]

2003-01-07 Thread neal r
Disable broadcast SSID under radio hardware setup. Unix tools like kismet can see that cell even if you have broadcast SSID disabled. If you want real security, use IPsec between the buildings. If you want some fake security you can fool with WEP ... that'd likely be safe on a point to point

MPLS images for 7200? 2500? [7:60284]

2003-01-04 Thread neal r
Thanks to the fellows at http://www.optimumdata.com I'm going to have a lab with a mix of 72xx and 25xx available for the next week or two for MPLS playtime with an eye on finishing that portion of my CCIP. I've wrestled today with 12.2.4T3 on the 25xx, got utterly frustrated with

Cat 3550 + modular QoS CLI - does it work? [7:59926]

2002-12-28 Thread neal r
I've been looking at the pages on the Cat 3550 and I can't tell if this thing will handle the entire range of possibilites that the modular QoS CLI provides, or if there are some hardware limits on numbers of queues, etc, etc. Is there someone with a 3550 in a lab environment that would be

CDP is broken! [7:59177]

2002-12-13 Thread neal r
I've been messing with IPsec encapsulation of GRE based tunnels on a wireless network and I'm really starting to hit some brick walls. In this case I've got a pair of 2620s at each location, a private T1 between them, and wireless ISP service on each end to back them. CDP does not flow over