Re: 7200 Router Questions... [7:59645]

2002-12-20 Thread Reinhold Fischer
Ed, all, 1. no clue. probably the usual marketing crap. 2. NPE has a single cpu that performs all the tasks. NSE has a PXF 'coprocessor' that can offload some tasks from the main CPU and therefore it could perform better in some cases. see:

Re: Little OT: Variation on SRM vs. Config Sync [7:58317]

2002-11-30 Thread Reinhold Fischer
AFAIK there is no special interaction between SRM and HSRP. You might want to use the 'standby preempt delay ' feature to be sure that routing protocols have converged before the router is taking over hsrp active router functionality. http://www.cisco.com/warp/public/619/hsrpguide4.shtmlT hth

Re: mpls ios files /special [7:57910]

2002-11-23 Thread Reinhold Fischer
ftp to ftp-eng.cisco.com (anonymous login) cd /rraszuk/specials here they are: -rw-r--r-- 1 23115eng 12940544 Feb 15 2002 c2500-js-l.20oct2001 -rw-r--r-- 1 23115eng 8303380 Feb 15 2002 c2500-p-l.20oct2001 -rw-r--r-- 1 23115eng 7973476 Feb 15 2002

Re: Reduce the bandwidth on gigabit interface [7:57927]

2002-11-23 Thread Reinhold Fischer
Not sure what exactly you want to achieve, but here are two options: - connect a gig-ethernet port of a switch to your gig-ethernet port of the 7600 and use a 10/100 port on the switch with fixed 10MBit speed setting - use traffic shaping as described in the OSM config guide:

Re: full duplex or half duplex, how can you tell [7:57431]

2002-11-14 Thread Reinhold Fischer
John, Cisco's 25xx series uses the AMD Lance Chip for their 10Mbit Ethernet Interface. This Chipset does not support full-duplex at all. Router#show controllers ethernet 0 LANCE unit 0, ^ Have never used a 2516 myself but as far as i know it has a simple 10Mbit Ethernet Hub built in.

Re: Problem with polling interface counters Cisco 7206vxr [7:56974]

2002-11-06 Thread Reinhold Fischer
Hi Daniel, counters are seriously broken in 12.0.21S4. Have not seen any counter problems with 12.0.21S5 so far. This is on 7200 and 7500 routers here. One bug open at cisco for this issue: CSCin15495 Symptoms The output counters that are associated with an interface may remain zero, even

Re: G.703 interface [7:56786]

2002-11-04 Thread Reinhold Fischer
Cisco1721 and VWIC-1MFT-E1 (or VWIC-1MFT-G703 if you need unframed mode). hth Reinhold On Mon, Nov 04, 2002 at 06:02:01AM +, Mohannad Khuffash wrote: Hello All, What is the lowest router series that support the G.703 interface? Is it 36xx ? Message Posted at:

Re: Cisco routers and MRTG [7:56794]

2002-11-04 Thread Reinhold Fischer
Bytes / Bits MRTG is very accurate - as long as the stuff that gets feeded into it is OK. hth Reinhold On Mon, Nov 04, 2002 at 12:28:34PM +, Firesox wrote: Folks, I am using MRTG to pull cisco Router's snmp mibs. On ehternet interface the graph shows the max speed of 1250.0K which is

Re: Cisco switches and laptops [7:56731]

2002-11-02 Thread Reinhold Fischer
Barry, not sure what you mean with 'it won't let go of their ip address from the last site they were at', but maybe this helps you: Troubleshooting Cisco Catalyst Switches to NIC Compatibility Issues http://www.cisco.com/warp/public/473/46.html Regards Reinhold On Sat, Nov 02, 2002 at

Re: MPLS on low-end hardware [7:56487]

2002-10-29 Thread Reinhold Fischer
Michael, if it is only for lab/learning purpose you can use the 12.0S images from ftp-eng.cisco.com. They are not supported by cisco, but work quite well. Use anonymous login and look under /isp Note: The cisco2500 image does not have too much MPLS features built in. No problems with the 2600

passed MCAST/QOS exam [7:40345]

2002-04-03 Thread Reinhold Fischer
hi all, today i took the multicast and qos exam (640-905). In my opinion it is the hardest of the three exams to achieve the CCIP/MPLS cert. For preparation i have used the Ciscopress 'developing ip multicast networks' book and read up the relevant sections of the Quality of Service Solutions

RE: Logging - terminal monitor not working [7:39957]

2002-03-31 Thread Reinhold Fischer
Have seen it on many (mostly smaller) routers. Its a bug: ## Bug Id : CSCdu60369 ## Headline no syslog logging when logging synchronous enabled ## Product c2600 Model ## Component os-logging Duplicate of ## Severity 2 Status M ## Version Found12.0(7)T 12.0(6)S Fixed-in

Re: incomplete ARP table - one for the X files [7:29283]

2001-12-15 Thread Reinhold Fischer
Tim, what network-addresses are used where with what masks ? I have seen similar problems with FW-1 related to proxy-arp. Reinhold On Sat, 15 Dec 2001, Tim Begley wrote: Hi - I've come across something strange (strange to me anyway)when deploying a router on lan segment with a checkpoint

Re: Frame Relay help please .. thanks [7:29002]

2001-12-13 Thread reinhold fischer
it depends on the layer2 protocol and how the router handles it if it sees its own packets coming back. I am using loops often to test a line if it is ok or has any problem. I am not sure how FrameRelay encapsulation behaves when you loop the line but i think it sounds feasible that it will not

Re: sh arp [7:17096]

2001-08-24 Thread Reinhold Fischer
The packet counters for incoming packets/sec look not very reasonable. Especially when relating them to the outgoing packets/sec. How high is the cpuload on the box ? Is there a possibility that some kind of attack is going on on the ethernet interface ? What confuses me a bit is that there are

Re: Triggered updates [7:11223]

2001-07-08 Thread Reinhold Fischer
Hi John, althought i am not totally sure about this one i will give it a try. Triggered updates lead to shorter convergence time. During the time that the network is not convergent it could well be that routing loops can occur because the routers have a different view of the network. others

Re: Switch to Switch Connectivity [7:11104]

2001-07-06 Thread Reinhold Fischer
Stan, are you seeing the other switch via cdp from both sides of the link ? I had a similar issue where i could see the other switch via cdp what fooled me into thinking that there is bidirectional communication possible. On the other side i saw no cdp neigbor. The link light was fine on both

Re: Debug not working via telnet [7:9019]

2001-06-19 Thread Reinhold Fischer
Hi, the problem could be that only process-switched packets get 'seen' by the debug process. issue 'no ip route-cache' at the interface config. please report if this solved the problem ... Greetings Reinhold On Tue, 19 Jun 2001, cisco guru wrote: Hi all, I am trying to see the debug output

Re: OT Simple SNMP Trap Logging Application [7:8968]

2001-06-18 Thread Reinhold Fischer
For what OS do you need this thingie ? Assuming you need it for windows here is something that might fit your needs: http://www.bttsoftware.co.uk/snmptrap.html hth Reinhold On Mon, 18 Jun 2001, Bob Johnson wrote: I need something to log SNMP traps. Something as simple as a Syslog server.

Re: fao: Catalyst Gurus [7:8177]

2001-06-12 Thread Reinhold Fischer
Larry, two things that can cause the delay: STP - Spanning Tree Protocol Solution: 'set spantree portfast enable' (Use it only on end-station ports) PAgP - Port Aggregation Protocol Solution: 'set port channel off' (PAgP is enabled by default on EtherChannel capable links) HTH Reinhold

Re: fao: Catalyst Gurus [7:8177]

2001-06-12 Thread Reinhold Fischer
Not quite correct. PortFast does not disable STP. It puts a port initially into 'Forwarding' state and then watches if loops occur. If for some reason the port is forced into 'Blocking' state and later needs to return to the 'Forwarding' state, it has to go through the 'Listening' and 'Learning'

Re: Gre tunnel - ip and ipx packet loss -URGENT!!!!!!!! [7:8201]

2001-06-12 Thread Reinhold Fischer
How is the FastEthernet 0/0 connected to the LAN ? Deferred means that the frame was discarded due to too many consecutive collisions on the medium. The router tried to send the frame to the ethernet a few times but it had no success - collisions always occured and the frame got discarded. Can

Re: fao: Catalyst Gurus [7:8177]

2001-06-12 Thread Reinhold Fischer
is not enabled. No tbeing too familiar with switches, I'm not sure on the effect of PAgP. Reinhold Fischer on 06/12/2001 06:09:51 PM To: Larry Ogun-Banjo/EN/Kpn-Orange@kpn-orange cc: [EMAIL PROTECTED] Subject: Re: fao: Catalyst Gurus [7:8177] Larry, two things that can cause

Re: Problem with hardware [7:6251]

2001-05-29 Thread Reinhold Fischer
The IOS you are using is probably not supporting this hardware. hth Reinhold On Tue, 29 May 2001, Sergey Konovalov wrote: WIC2T + Serial WIC + Voice 2V Problem: Router cannot see its interfaces (hardware) show interfaces- received none show version - received none in hardware

Re: Serial1/3.1 is deleted, line protocol is down [7:6090]

2001-05-28 Thread Reinhold Fischer
Deleting subinterfaces often requires a 'reload' for them to disappear. Greetings Reinhold On Mon, 28 May 2001, Arun wrote: Hi let me explain what i mean to ask i try to configured a serial interface(sub interface) on ser1/3 i could n't achieve what i was trying to do (i was trying to

Re: TR Int Errr [7:6112]

2001-05-28 Thread Reinhold Fischer
Hi RamG, tell us more about to what the Tokenring Interface is connected to. a MAU ? a TR-Switch ? Is the port you want to connect to and the cabling fine and does it support the configured 16MHz TokenRing ? Reinhold On Mon, 28 May 2001, RamG wrote: Hello Gang - I am having problem bring up

OT: Re: Does Solaris box and microsoft PC run RIP? [7:5862]

2001-05-25 Thread Reinhold Fischer
Regarding the Slowlaris box i can give you a hint. Look at the /etc/init.d/inetinit file of the solaris box. It is very well explained there under which circumstances solaris acts as a router or not. Excerpt from this file: # Determine how many active interfaces there are and how many

Re: Strange connectivity issue [7:4533]

2001-05-15 Thread Reinhold Fischer
Hello John, we experience the same Problems with Baystack 350F-HD switches with Software Release 3.0.0.14. We donwgraded one of these to 2.x Software release and the problem went away. We do not have an actual maintenance contract with nortel/baynetworks so we have no possibility to verify if

Re: IP extended access list question [7:4321]

2001-05-14 Thread Reinhold Fischer
Hi Hans, the echo reply is the answer packet to the echo request. so with the part of configuration that you gave, the echo request goes 'out' of interface e0. There is no outgoing access-list set, so the echo request will reach its destination. the echo reply comes from 171.21.50.2 and goes

Re: How to install CiscoSecure ACS on Solaris for Intel? [7:4362]

2001-05-14 Thread Reinhold Fischer
Hi RF, as i took the MCNS training, we also discussed CiscoSecureACS for Unix and NT. The Coursebook says strictly that only the sparc architecture of solaris is supported. Thats waht i found on the Cisco Documentation CD: http://

Re: splitting a PRI connection [7:4359]

2001-05-14 Thread Reinhold Fischer
hi, could it be that it is a channelized E1 ? You can use the 30 B-Channels separately. Here is how it looks on one of our routers: Excerpt from 'show version': cisco 4500 (R4K) processor (revision B) with 32768K/4096K bytes of memory. Processor board ID 01838185 R4600 processor,

Re: splitting a PRI connection [7:4359]

2001-05-14 Thread Reinhold Fischer
Next try ... Have to take care on characters that appear also in html-mail ... hi, could it be that it is a channelized E1 ? You can use the 30 B-Channels separately. Here is how it looks on one of our routers: Excerpt from 'show version': cisco 4500 (R4K) processor (revision B) with

Re: strange arp entries [7:4164]

2001-05-11 Thread Reinhold Fischer
Some other stations are trying to access the IP addresses marked as incomplete, therefore the router tries to arp for them. Because the stations do not exist on your network, the arp request is not successful. i would setup 'logging accesslists' inbound on the other interfaces of the router to

Re: Is there a hyperterm in Solaris? [7:606]

2001-04-14 Thread Reinhold Fischer
hi, there is a very basic terminal program included in solaris called 'tip'. You have to add a line to /etc/remote to use it comfortably. I added this line to /etc/remote: serial2:dv=/dev/cua/b:br#9600 that means i use serial B with 9600 bps to start tip i use then 'tip serial2' to quit tip

Re: What is the difference between flooded broadcast and direct [7:466]

2001-04-13 Thread Reinhold Fischer
a directed broadcast comes from outside of the subnet and is directed to the broadcast address of the subnet. this can be abused to do bad things with it. just imagine sending a packet with a spoofed source address to the broadcast address of a subnet. all the hosts that react on the packet will

Re: IBM 8228 MAU

2001-04-01 Thread Reinhold Fischer
Please correct me if i am wrong here, but isn't it required to connect RI to RO to form the ring ? I always kept them connected together when using the MAU in a lab environment. To test the ports i can only agree to ElephantChild's method. Greetings Reinhold On Sun, 1 Apr 2001, ElephantChild

Re: Bizarre Router Behaviour

2001-01-25 Thread Reinhold Fischer
access-lists. There is also a very good paper on tracking packet floods available on CCO. hth Reinhold -- Reinhold Fischer [EMAIL PROTECTED] CCNP-Security/SunCSA/HP Certified Consultant for Network Management On Thu, 25 Jan 2001, [EMAIL PROTECTED] wrote: Hi all, I

Re: Ping

2001-01-25 Thread Reinhold Fischer
Source address or interface: hth Reinhold -- Reinhold Fischer [EMAIL PROTECTED] CCNP-Security/SunCSA/HP Certified Consultant for Network Management On Thu, 25 Jan 2001 [EMAIL PROTECTED] wrote: Hi When I ping from a router dose it take the loopback ip address

Re: can SPAN port transmit?

2000-12-29 Thread Reinhold Fischer
the port used as SPAN port to send data. hth Reinhold -- Reinhold Fischer [EMAIL PROTECTED] CCNP-Security/SunCSA/HP Certified Consultant for Network Management On Fri, 29 Dec 2000, Priscilla Oppenheimer wrote: Hi folks, If I connect a Sniffer-like device to the SPAN

RE: TCP/IP port 1761 and 1762

2000-12-29 Thread Reinhold Fischer
SP2 client. : :When you upgrade to SP2, ONLY the Admin console on the site server is upgraded at the :same time. All remote Admin consoles need to be updated individually. Could it be that the hosts are winnt workstations with an installed Microsoft System Management Server Client ? hth Reinhold --

Re: bandwidth loss!

2000-12-27 Thread Reinhold Fischer
- could fit your needs). greetings Reinhold -- Reinhold Fischer [EMAIL PROTECTED] CCNP-Security/SunCSA/HP Certified Consultant for Network Management On Wed, 27 Dec 2000, stephano mwendo wrote: Haloo guys, I have one problem here which is troubling me. I have one

Re: Creating more than 5 vty lines

2000-12-19 Thread Reinhold Fischer
you need to have Enterprise IOS to create more than 5 lines -- Reinhold Fischer [EMAIL PROTECTED] CCNP-Security/SunCSA/HP Certified Consultant for Network Management On Tue, 19 Dec 2000, Larry Ogun-Banjo wrote: Could anyone kindly assist, please. On a Cisco router

Re: SYN Attack - How to identify this

2000-11-19 Thread Reinhold Fischer
For detailled information how the different tools work you can use the search function on http://www.cert.org (watch word-wrap): http://search.cert.org/query.html?rq=0col=allcertht=0qp=qt=tcp+syn+attackqs=qc=pw=100%25ws=1la=qm=0st=1nh=25lk=1rf=2oq=rq=0si=1 hth Reinhold -- Reinhold Fischer

Re: Connecting to Console port (How to issue a BREAK with minthyperterminal)

2000-10-28 Thread Reinhold Fischer
in hyperterm. I use 110 as example. Now just press a few different keys repeatedly. Thies issued the break signal. Now switch back to 9600 bits per second and continue the usual procedure. hth Reinhold -- Reinhold Fischer [EMAIL PROTECTED] CCNP/SunCSA/HP Certified Consultant

Re: 4003 Catalyst Switch, Unable to connect 10mbps links

2000-10-25 Thread Reinhold Fischer
check the spanning tree settings. probably the port on the catalyst is not in forwarding state as the dhcp clients try to get their lease from the dhcp server. disable spanning tree if you don't need it. if you need it, setting the ports to portfast might help. hth Reinhold -- Reinhold

Re: Token ring and duplex

2000-10-17 Thread Reinhold Fischer
i think it has nothing to do with the ring speed. To use fullduplex the routerport (i hope you are referring to a router port) has to be connected to a tokenring switch. no clue if it could work too in a ring with only two stations. lets see what others say ... hth Reinhold -- Reinhold

RE: NAT twice, will this work?

2000-10-17 Thread Reinhold Fischer
jason, had used a similar setup (had to use nat three times) with cisco routers with success. The router does proxy arp in my case. Cannot comment about the sun/firewall1 stuff ... hth Reinhold -- Reinhold Fischer [EMAIL PROTECTED] CCNP/SunCSA/HP Certified Consultant

Re: Length of Ethernet frame

2000-10-02 Thread Reinhold Fischer
: DA: 6 octets SA: 6 octets Type: 2 octets Payload(Data): up to 1500 octets Frame Check Sequence (FCS): 4 octets sum: 1518 octets greetings, Reinhold -- Reinhold Fischer [EMAIL PROTECTED] CCNP/SunCSA/HP Certified Consultant for Network Management On Mon, 2 Oct 2000, M

Re: EIGRP Port number

2000-10-02 Thread Reinhold Fischer
It uses neither udp nor tcp. It uses its own ip protocol (protocol number 88). TCP has ip protocol nr. 6, UDP has ip protocol nr. 17. hth, Reinhold -- Reinhold Fischer [EMAIL PROTECTED] CCNP/SunCSA/HP Certified Consultant for Network Management On Mon, 2 Oct 2000, kikpasa

RE: Linux Proxy server and 1700 using NAT

2000-09-10 Thread Reinhold Fischer
on the linux box and you will use proxy- services (squid, socks5, fwtk) to provide controlled internet access to the users. hth Reinhold -- Reinhold Fischer CCNP/SunCSA/HP Certified Consultant for Network Management On Sat, 9 Sep 2000, Trevor Corness wrote: Yes, definately. Don't run

Re: Command Question

2000-09-01 Thread Reinhold Fischer
) Usually it should be necessary only on serial interfaces to set the bandwidth to the actual value. As example the bandwidth of a serial inter- face is by default always configured to 1544 Kbit. group: please correct me if i got something wrong. Reinhold -- Reinhold Fischer CCNP/SCSA/HP Certified

Re: A question about IPSec

2000-08-31 Thread Reinhold Fischer
/assignments/protocol-numbers hth Reinhold -- Reinhold Fischer CCNP/SCSA/HP Certified Consultant for Network Management On Thu, 31 Aug 2000, George Zhang wrote: I read the following form Cisco documentation about IPSec: "IKE uses UDP port 500. The IPSec ESP and AH protocols use PRO

Re: subinterfaces

2000-08-31 Thread Reinhold Fischer
-- Reinhold Fischer CCNP/SCSA/HP Certified Consultant for Network Management On Thu, 31 Aug 2000, Nova Rich wrote: hey guys, I was wondering how to apply subinterfaces. I have 1 ether port on my router (1600) and need 2 links to the switch. One for public IP and the other for private IP

Re: access-list interpretation

2000-08-31 Thread Reinhold Fischer
.*.*.* and target as exactly 255.0.0.0. hth Reinhold -- Reinhold Fischer CCNP/SCSA/HP Certified Consultant for Network Management On Thu, 31 Aug 2000, Yee, Jason wrote: hi, anyone knows how to interpret the access-list below : access-list 101 160.0.0.0 0.255.255.255 255.0.0.0 0.0.0.0

RE: 5-4-3 Rule

2000-08-29 Thread Reinhold Fischer
Sorry, you are wrong ;) the rule defines that you canNOT have more than 5 segments with 4 repeaters and NO more than 3 segments can be populatet. hth, Reinhold -- Reinhold Fischer CCNP/SCSA/HP Certified Consultant for Network Management On Tue, 29 Aug 2000, Hitesh Pathak